CVE-2026-58241
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged user to modify configuration tables that control access to data objects during specific operations. These unauthorized modifications could result in processing delays and operational disruption, leading to a low impact on integrity and availability, with no impact on confidentiality.
Risk Assessment
The risk includes potential disruption of operations and processing delays, which could affect service availability and configuration integrity.
Recommendation
It is recommended to restrict permissions to modify configuration tables, monitor changes, and apply security patches.
Original NVD description (English source)
SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged user to modify configuration tables that control access to data objects during specific operations. These unauthorized modifications could result in processing delays and operational disruption, leading to a low impact on the integrity and availability of the application with no impact on confidentiality.