HarborGuard / CVE
Back to search
HIGHCVE-2026-23689Published Modified CNA sap

CVE-2026-23689: Denial of service (DOS) in SAP Supply Chain Management

Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution that consumes excessive system resources, potentially rendering the system unavailable. Successful exploitation results in a denial-of-service condition that impacts availability, while confidentiality and integrity remain unaffected.

Metrics

CVSS v3.1
7.7
Severity
HIGH
Fixed in
Affected Products
1
Affected packages
  • SAP_SE / SAP Supply Chain Management
    SCMAPO 713 · 714 · SCM 700 · 701 · 702 · 712
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H