Nixpkgs security tracker
Dismissed
(no matching packages found)
Permalink
CVE-2026-44769
5.5 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): High (H)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): Low (L)
- Availability (A): Low (L)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): High (H)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): Low (L)
Activity log
- Created & dismissed (no matching packages found) suggestion
SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)
SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database queries, exposing the backend database. This results in low impact on confidentiality, with no impact on integrity and availability of the application.
Affected products
SAP S/4HANA Project Management (PPM-PRO)
- ==450_700
- ==618
- ==605
- ==SAP_APPL 600
- ==602
- ==610_740
- ==108
- ==617
- ==500_702
- ==604
- ==606
- ==CPRXRPM 400
- ==104
- ==106
- ==107
- ==603
- ==103
- ==105
- ==S4CORE 102