CVE-2026-89124: SAP HANA (Display Product Catalog Based on Customs Declaration) GTSCORE 200, 300

Affected technology

SAP HANA (Display Product Catalog Based on Customs Declaration) · GTSCORE 200, 300
SAP_SE

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated low-privileged user can access sensitive information beyond their intended authorization scope. Vendor/CNA’s CVSS 3.1 assessment (base score 4.3/10) rates confidentiality impact as low; integrity and availability impact as none.