S4CRM vulnerabilities

1 known vulnerability in S4CRM from SAP. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  S4CRM: Improper Control of Generation of Code

  CVE-2026-109795Nov 10, 2026SAP

  SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain remote-enabled functionality. An attacker with low privileges could send specially crafted input through a remote interface to inject and execute arb