CVE-2026-44769: SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)
Published Jul 14, 2026
·Updated
SAP S/4HANA application Project Management (PPM-PRO) allows an attacker with high privileges to execute crafted database queries, exposing the backend database. This results in low impact on confidentiality, with no impact on integrity and availability of the application.
Affected Software
1 affected component
SAP SAP S/4HANA Project Management (PPM-PRO)
Event History
Jul 14, 2026
CVE Published
via MITRE·12:21 AM
Data Sourced
via MITRE·12:21 AM
DescriptionSeverity
Data Sourced
via NVD·01:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-44769?
CVE-2026-44769 has a medium severity rating of 5.5.
2
How do I fix CVE-2026-44769?
To mitigate CVE-2026-44769, apply the latest security patches provided by SAP for the S/4HANA Project Management module.
3
What type of vulnerability is CVE-2026-44769?
CVE-2026-44769 is classified as an SQL Injection vulnerability.
4
What impact does CVE-2026-44769 have on confidentiality?
CVE-2026-44769 has a low impact on confidentiality, allowing potential exposure of the backend database.
5
Who is affected by CVE-2026-44769?
CVE-2026-44769 affects users with high privileges in SAP S/4HANA Project Management (PPM-PRO) who can execute crafted database queries.