Lucene search
K

311 matches found

RedhatCVE
RedhatCVE
added 2026/02/11 7:30 a.m.1 views

CVE-2026-23688

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS5.5AI score0.00042EPSS
Exploits0References1
NVD
NVD
added 2026/02/10 4:16 a.m.2 views

CVE-2026-23688

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS0.00042EPSS
Exploits0References2
OSV
OSV
added 2026/02/10 4:16 a.m.1 views

CVE-2026-23688

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS5.8AI score0.00042EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/10 3:2 a.m.3 views

CVE-2026-23688 Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS5.5AI score0.00042EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/10 3:2 a.m.26 views

CVE-2026-23688 Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS0.00042EPSS
Exploits0References2
CVE
CVE
added 2026/02/10 3:2 a.m.5 views

CVE-2026-23688

CVE-2026-23688 affects SAP Fiori App Manage Service Entry Sheets. The issue is insufficient authorization checks for an authenticated user, enabling privilege escalation with low impact to integrity; confidentiality and availability are unaffected. CVSS 3.1 vector yields a base score of 4.3 (MEDI...

4.3CVSS5.5AI score0.00042EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.2 views

SAP Fiori app 安全漏洞

The SAP Fiori App is a corporate application developed by the German company SAP. The SAP Fiori App has a security vulnerability, which stems from failing to perform necessary authorization checks on authenticated users, potentially leading to privilege escalation...

4.3CVSS5.8AI score0.00042EPSS
Exploits0References3
NVD
NVD
added 2026/01/27 1:16 a.m.2 views

CVE-2026-23683

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted...

4.3CVSS0.00046EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/27 12:22 a.m.3 views

CVE-2026-23683

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted...

4.3CVSS5.9AI score0.00046EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/01/27 12:22 a.m.8 views

CVE-2026-23683

CVE-2026-23683 affects SAP Fiori App Intercompany Balance Reconciliation. Root cause: missing authorization checks for an authenticated user leading to privilege escalation. Impact is described as low for confidentiality, integrity and availability; no exploitation details are provided. Remediati...

4.3CVSS5.9AI score0.00046EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/27 12:22 a.m.1 views

CVE-2026-23683 Missing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation)

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted...

4.3CVSS5.9AI score0.00046EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/27 12:22 a.m.1 views

EUVD-2026-4844

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted...

4.3CVSS5.9AI score0.00046EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/14 1:22 a.m.1 views

CVE-2026-0496

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file including script files without proper file format validation. This has low impact on confidentiality, integrity and availability of the application...

6.6CVSS7AI score0.00066EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 1:22 a.m.4 views

CVE-2026-0494

Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and availability are not impacted...

4.3CVSS6.6AI score0.0005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 1:22 a.m.2 views

CVE-2026-0493

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on...

4.3CVSS6.8AI score0.00026EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 1:22 a.m.2 views

CVE-2026-0495

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application...

5.1CVSS6.8AI score0.00056EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 1:22 a.m.1 views

CVE-2026-0511

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted...

8.1CVSS7AI score0.00051EPSS
Exploits0References1
NVD
NVD
added 2026/01/13 2:15 a.m.5 views

CVE-2026-0511

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted...

8.1CVSS0.00051EPSS
Exploits0References2
NVD
NVD
added 2026/01/13 2:15 a.m.6 views

CVE-2026-0493

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on...

4.3CVSS0.00026EPSS
Exploits0References2
NVD
NVD
added 2026/01/13 2:15 a.m.5 views

CVE-2026-0495

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application...

5.1CVSS0.00056EPSS
Exploits0References2
Rows per page
Query Builder