Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2026-44769SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)

Description

SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database queries, exposing the backend database. This results in low impact on confidentiality, with no impact on integrity and availability of the application.

Timeline

  1. ID reserved

    By sap

  2. · 2 months later

    Published

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2026-44769, by who scored it
Scored byCVSSScoreVector
sapCNA (assigner)3.1Medium5.5CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L
NVDNVD · Awaiting Analysis3.1Medium5.5CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L
EPSS (exploitation in 30 days)
0.31% · top 76% of all CVEs (13 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Affected products

  • SAP_SE · SAP S/4HANA Project Management (PPM-PRO)

    • affected SAP_APPL 600
    • affected 602
    • affected 603
    • affected 604
    • affected 605
    • affected 606
    • affected 617
    • affected 618
    • affected S4CORE 102
    • affected 103
    • affected 104
    • affected 105
    • affected 106
    • affected 107
    • affected 108
    • affected CPRXRPM 400
    • affected 450_700
    • affected 500_702
    • affected 610_740

References

References2

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-44769 badge
[![CVE-2026-44769](https://cveledger.app/badge/CVE-2026-44769.svg)](https://cveledger.app/cve/CVE-2026-44769)

Record last updated .