Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-24315— Path Traversal Vulnerability in SAP Fiori (launchpad)

Quick assessment

Affected

SAP_SE SAP Fiori (launchpad)

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SAP Fiori是德国思爱普（SAP）公司的一套为SAP应用程序提供用户体验（UX）的设计系统，它为设计人员和开发人员提供了一套工具和指南，能够快速地开发适用于任何平台的应用，为创建者和用户提供一致、创新的体验。 SAP Fiori存在安全漏洞，该漏洞源于允许攻击者制作恶意URL触发Fiori域上的任意服务调用，可能导致用户打开时通过窃取用户凭据破坏账户。

CVSS 4.2 · Medium EPSS 0.17% · P7 Updated Jun 13, 2026

Possible ATT&CK Techniques 2 AI

T1566.002 · Spearphishing Link T1189 · Drive-by Compromise

Affected Version Matrix 6

Vendor	Product	Version Range	Status
SAP_SE	SAP Fiori (launchpad)	`SAP_UI 754`	affected
		`755`	affected
		`756`	affected
		`757`	affected
		`758`	affected
		`816`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-24315

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Path Traversal Vulnerability in SAP Fiori (launchpad)

Source: CVE Program / CVE List V5

Vulnerability Description

SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system causing low impact on Confidentiality and Integrity. Availability of the system is no impacted.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

路径遍历：’…/…//’

Source: CVE Program / CVE List V5

Vulnerability Title

SAP Fiori 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
SAP_SE	SAP Fiori (launchpad)	SAP_UI 754	-

II. Public POCs for CVE-2026-24315

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-24315

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-24315 (1)

🔗 SAP for Me: Sign In

https://www.cve.org/CVERecord?id=CVE-2026-24315

Same Patch Batch · SAP_SE · 2026-06-09 · 12 CVEs total

CVE-2026-44748	9.9 CRITICAL	XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform
CVE-2026-27671	9.8 CRITICAL	Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platf
CVE-2026-40128	9.0 CRITICAL	Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)
CVE-2026-44751	7.1 HIGH	Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform
CVE-2026-44754	6.6 MEDIUM	Missing caller identification check-in for ODP Data Replication APIs
CVE-2026-44744	6.5 MEDIUM	SQL Injection vulnerability in SAP S/4HANA
CVE-2026-44746	6.1 MEDIUM	Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Ser
CVE-2026-44757	4.7 MEDIUM	Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager
CVE-2026-44750	4.3 MEDIUM	Missing Authorization check in SAP MDG (Review Match Groups Application)
CVE-2026-44755	4.3 MEDIUM	Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform
CVE-2026-44743	3.7 LOW	Security Misconfiguration vulnerability in SAP Business Objects

IV. Related Vulnerabilities

Same product: SAP Fiori (launchpad)

CVE-2025-42941
Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)

Same vendor: SAP_SE

Same weakness: CWE-35