Sap Hana Display Product Catalog Based On Customs Declaration
Monthly
An authenticated low-privileged user can access sensitive information beyond their authorized scope in SAP HANA's 'Display Product Catalog Based on Customs Declaration' application due to insufficient authorization checks (CWE-863). The vulnerability is network-accessible but requires a valid account and results in partial confidentiality impact only, with no effect on integrity or availability (CVSS 4.3). No public exploit code or active exploitation has been identified at time of analysis.
An authenticated low-privileged user can access sensitive information beyond their authorized scope in SAP HANA's 'Display Product Catalog Based on Customs Declaration' application due to insufficient authorization checks (CWE-863). The vulnerability is network-accessible but requires a valid account and results in partial confidentiality impact only, with no effect on integrity or availability (CVSS 4.3). No public exploit code or active exploitation has been identified at time of analysis.