CVE-2026-0503

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0503", "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "state": "PUBLISHED", "assignerShortName": "sap", "dateReserved": "2025-12-09T22:06:43.804Z", "datePublished": "2026-01-13T01:14:20.823Z", "dateUpdated": "2026-01-13T19:09:43.485Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)", "vendor": "SAP_SE", "versions": [{"status": "affected", "version": "SAP_APPL 618"}, {"status": "affected", "version": "S4CORE 102"}, {"status": "affected", "version": "103"}, {"status": "affected", "version": "104"}, {"status": "affected", "version": "105"}, {"status": "affected", "version": "106"}, {"status": "affected", "version": "107"}, {"status": "affected", "version": "108"}, {"status": "affected", "version": "109"}, {"status": "affected", "version": "EA-APPL 605"}, {"status": "affected", "version": "606"}, {"status": "affected", "version": "617"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP EHS Management), an attacker could extract hardcoded clear-text credentials and bypass the password authentication check by manipulating user parameters. Upon successful exploitation, the attacker can access, modify or delete certain change pointer information within EHS objects in the application which might further affect the subsequent systems. This vulnerability leads to a low impact on confidentiality and integrity of the application with no affect on the availability.</p>"}], "value": "Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP EHS Management), an attacker could extract hardcoded clear-text credentials and bypass the password authentication check by manipulating user parameters. Upon successful exploitation, the attacker can access, modify or delete certain change pointer information within EHS objects in the application which might further affect the subsequent systems. This vulnerability leads to a low impact on confidentiality and integrity of the application with no affect on the availability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-862", "description": "CWE-862: Missing Authorization", "lang": "eng", "type": "CWE"}]}], "providerMetadata": {"orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "shortName": "sap", "dateUpdated": "2026-01-13T01:14:20.823Z"}, "references": [{"url": "https://me.sap.com/notes/3681523"}, {"url": "https://url.sap/sapsecuritypatchday"}], "source": {"discovery": "UNKNOWN"}, "title": "Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-13T19:07:53.474913Z", "id": "CVE-2026-0503", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-13T19:09:43.485Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0503", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-13T19:07:53.474913Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-13T19:09:40.767Z"}}], "cna": {"title": "Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "SAP_SE", "product": "SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)", "versions": [{"status": "affected", "version": "SAP_APPL 618"}, {"status": "affected", "version": "S4CORE 102"}, {"status": "affected", "version": "103"}, {"status": "affected", "version": "104"}, {"status": "affected", "version": "105"}, {"status": "affected", "version": "106"}, {"status": "affected", "version": "107"}, {"status": "affected", "version": "108"}, {"status": "affected", "version": "109"}, {"status": "affected", "version": "EA-APPL 605"}, {"status": "affected", "version": "606"}, {"status": "affected", "version": "617"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://me.sap.com/notes/3681523"}, {"url": "https://url.sap/sapsecuritypatchday"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP EHS Management), an attacker could extract hardcoded clear-text credentials and bypass the password authentication check by manipulating user parameters. Upon successful exploitation, the attacker can access, modify or delete certain change pointer information within EHS objects in the application which might further affect the subsequent systems. This vulnerability leads to a low impact on confidentiality and integrity of the application with no affect on the availability.", "supportingMedia": [{"type": "text/html", "value": "<p>Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP EHS Management), an attacker could extract hardcoded clear-text credentials and bypass the password authentication check by manipulating user parameters. Upon successful exploitation, the attacker can access, modify or delete certain change pointer information within EHS objects in the application which might further affect the subsequent systems. This vulnerability leads to a low impact on confidentiality and integrity of the application with no affect on the availability.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "eng", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862: Missing Authorization"}]}], "providerMetadata": {"orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "shortName": "sap", "dateUpdated": "2026-01-13T01:14:20.823Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0503", "state": "PUBLISHED", "dateUpdated": "2026-01-13T19:09:43.485Z", "dateReserved": "2025-12-09T22:06:43.804Z", "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "datePublished": "2026-01-13T01:14:20.823Z", "assignerShortName": "sap"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)", "vendor": "SAP_SE", "versions": [{"status": "affected", "version": "SAP_APPL 618"}, {"status": "affected", "version": "S4CORE 102"}, {"status": "affected", "version": "103"}, {"status": "affected", "version": "104"}, {"status": "affected", "version": "105"}, {"status": "affected", "version": "106"}, {"status": "affected", "version": "107"}, {"status": "affected", "version": "108"}, {"status": "affected", "version": "109"}, {"status": "affected", "version": "EA-APPL 605"}, {"status": "affected", "version": "606"}, {"status": "affected", "version": "617"}]}], "source": "cna@sap.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP EHS Management), an attacker could extract hardcoded clear-text credentials and bypass the password authentication check by manipulating user parameters. Upon successful exploitation, the attacker can access, modify or delete certain change pointer information within EHS objects in the application which might further affect the subsequent systems. This vulnerability leads to a low impact on confidentiality and integrity of the application with no affect on the availability."}, {"lang": "es", "value": "Debido a una falta de verificaci\u00f3n de autorizaci\u00f3n en SAP ERP Central Component (SAP ECC) y SAP S/4HANA (SAP EHS Management), un atacante podr\u00eda extraer credenciales codificadas en texto claro y eludir la verificaci\u00f3n de autenticaci\u00f3n de contrase\u00f1a manipulando par\u00e1metros de usuario. Tras una explotaci\u00f3n exitosa, el atacante puede acceder, modificar o eliminar cierta informaci\u00f3n de punteros de cambio dentro de objetos EHS en la aplicaci\u00f3n, lo que podr\u00eda afectar a\u00fan m\u00e1s a los sistemas subsiguientes. Esta vulnerabilidad conlleva a un impacto bajo en la confidencialidad y la integridad de la aplicaci\u00f3n, sin afectar la disponibilidad."}], "id": "CVE-2026-0503", "lastModified": "2026-06-17T10:10:51.473", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 2.7, "source": "cna@sap.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0503", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-13T19:07:53.474913Z", "version": "2.0.3"}}]}, "published": "2026-01-13T02:15:52.953", "references": [{"source": "cna@sap.com", "url": "https://me.sap.com/notes/3681523"}, {"source": "cna@sap.com", "url": "https://url.sap/sapsecuritypatchday"}], "sourceIdentifier": "cna@sap.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "cna@sap.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T06:49:17.810879+00:00", "value": {"mitigation_remediation": ["Apply SAP Note 3681523 to patch the missing authorization check", "Upgrade SAP ERP Central Component and SAP S/4HANA (SAP EHS Management) to a version that incorporates the fix", "Limit and validate user parameters used by the EHS application, removing any hard\u2011coded credentials or restricting access to vulnerable endpoints"], "summary": {"action": "Apply Patch", "impact": "Credential Disclosure and Authentication Bypass"}, "threat_synthesis": {"affected_systems": "The affected vendors are SAP SE with the products SAP ERP Central Component and SAP S/4HANA (SAP EHS Management). Specific version numbers are not provided in the current data, so a vulnerability assessment should target all deployable instances of these products that may contain the exposed credentials.", "description_and_impact": "A missing authorization check in the SAP ERP Central Component and SAP S/4HANA (SAP EHS Management) allows an attacker to read hard\u2011coded clear\u2011text credentials and bypass password authentication by manipulating user parameters. Exploitation gives the attacker the ability to access, modify, or delete change pointer information in EHS objects, which can in turn influence downstream systems. The vulnerability is assessed as having low impact on confidentiality and integrity, and no effect on availability.", "risk_and_exploitability": "The CVSS base score of 6.4 categorizes this issue as medium severity. The EPSS score of less than 1% indicates a very low probability of active exploitation at present, and it is not listed in the CISA KEV catalog. The likely attack vector involves the attacker manipulating user parameters that the application does not adequately authorize. Such a vector typically requires the attacker to have some user or process access that can alter those parameters. Once the check is bypassed, the attacker gains read/write privileges over the affected EHS data structures."}}}}, "created": "2026-01-13T09:27:01.363000+00:00", "updated": "2026-04-18T07:00:11.342129+00:00", "vendors": ["sap", "sap$PRODUCT$erp_central_component", "sap$PRODUCT$s/4hana"]}