What is CVE-2026-66770?

CVE-2026-66770 is a medium-severity vulnerability in Sap_se Sap Social Intelligence, classified under SQL Injection. CVSS score: 6.3/10. Published 2026-08-11.

How severe is CVE-2026-66770?

Medium severity. CVSS v3 base score is 6.3 out of 10.

SQL Injection in Sap_se Sap Social Intelligence

CVE-2026-66770

Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL DDL (Data Definition Language) string into the underlying database without further authorization. Successful exploitat…

Vulnerability class: SQL Injection

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Sap_se Sap Social Intelligence — versions S4FND 102, 103, 104

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cna@sap.com
cna@sap.com

Frequently asked questions

What is CVE-2026-66770?: CVE-2026-66770 is a medium-severity vulnerability in Sap_se Sap Social Intelligence, classified under SQL Injection. CVSS score: 6.3/10. Published 2026-08-11.
How severe is CVE-2026-66770?: Medium severity. CVSS v3 base score is 6.3 out of 10.