Sap Solution Tools Plug-in — known CVE vulnerabilities

Every CVE whose affected-product data names Sap Solution Tools Plug-in, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-24322 — CVSS 7.7 (high): SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated…
• CVE-2026-0486 — CVSS 5.0 (medium): In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user…
• CVE-2026-23681 — CVSS 4.3 (medium): Due to missing authorization check in a function module in SAP Support Tools Plug-In, an authenticated attacker could invoke specific…