Lucene search
K

35 matches found

RedhatCVE
RedhatCVE
added 2026/02/11 7:30 a.m.2 views

CVE-2026-23688

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS5.5AI score0.00042EPSS
Exploits0References1
NVD
NVD
added 2026/02/10 4:16 a.m.4 views

CVE-2026-23688

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS0.00042EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/10 3:2 a.m.3 views

CVE-2026-23688 Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS5.5AI score0.00042EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/10 3:2 a.m.27 views

CVE-2026-23688 Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS0.00042EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/14 1:22 a.m.5 views

CVE-2026-0494

Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and availability are not impacted...

4.3CVSS6.6AI score0.00032EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 1:22 a.m.2 views

CVE-2026-0495

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application...

5.1CVSS6.8AI score0.00027EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 1:22 a.m.2 views

CVE-2026-0511

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted...

8.1CVSS7AI score0.00033EPSS
Exploits0References1
CVE
CVE
added 2026/01/13 1:15 a.m.11 views

CVE-2026-0511

The CVE-2026-0511 issue affects SAP Fiori App Intercompany Balance Reconciliation. The vulnerability is due to missing authorization checks for an authenticated user, enabling privilege escalation. Impact is high on confidentiality and integrity; availability is not affected. The issue is corrobo...

8.1CVSS6.7AI score0.00033EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/13 1:15 a.m.1 views

CVE-2026-0511 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted...

8.1CVSS5.3AI score0.00033EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/13 1:13 a.m.22 views

CVE-2026-0496 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file including script files without proper file format validation. This has low impact on confidentiality, integrity and availability of the application...

6.6CVSS0.00043EPSS
Exploits0References2
CVE
CVE
added 2026/01/13 1:13 a.m.9 views

CVE-2026-0495

CVE-2026-0495 affects SAP Fiori App Intercompany Balance Reconciliation. A high-privilege attacker can cause the application to send uploaded files to arbitrary email addresses, enabling phishing campaigns. Impact on confidentiality, integrity and availability is described as low. The provided do...

5.1CVSS6.5AI score0.00027EPSS
Exploits0References2
CVE
CVE
added 2026/01/13 1:13 a.m.14 views

CVE-2026-0493

CVE-2026-0493 describes a Cross-Site Request Forgery in the SAP Fiori App Intercompany Balance Reconciliation. The issue could allow an attacker to trigger state-changing actions on behalf of an authenticated user by using an inappropriate request type, with low impact on integrity and no impact ...

4.3CVSS6.5AI score0.00017EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/13 1:13 a.m.24 views

CVE-2026-0493 Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on...

4.3CVSS0.00017EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.1 views

SAP Fiori App Intercompany Balance Reconciliation 安全漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A security vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation that stems from a failure to perform required authorization checks on authenticated users, which could result in...

8.1CVSS5.8AI score0.00033EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.1 views

SAP Fiori App Intercompany Balance Reconciliation 安全漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A security vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation, which originates from an elevated-privilege attacker being able to send an uploaded file to an arbitrary email, whi...

5.1CVSS5.9AI score0.00027EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.3 views

SAP Fiori App Intercompany Balance Reconciliation 跨站请求伪造漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A cross-site request forgery vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation, which originates from a cross-site request forgery and could allow an attacker to perform a state...

4.3CVSS5.8AI score0.00017EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.3 views

PT-2026-2332

Name of the Vulnerable Software and Affected Versions SAP Fiori App Intercompany Balance Reconciliation affected versions not specified Description The application allows an attacker with high privileges to upload any file, including script files, without proper file format validation. This has a...

6.6CVSS6.5AI score0.00043EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.3 views

SAP Fiori App Intercompany Balance Reconciliation 安全漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A security vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation, which arises from the ability to access restricted information under certain conditions, causing a low impact on...

4.3CVSS5.8AI score0.00032EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.2 views

PT-2026-2343

Name of the Vulnerable Software and Affected Versions SAP Fiori App Intercompany Balance Reconciliation affected versions not specified Description The SAP Fiori App Intercompany Balance Reconciliation does not implement proper authorization checks for authenticated users, potentially allowing fo...

8.1CVSS6.4AI score0.00033EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-24092

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00158EPSS
Exploits0References2
Rows per page
Query Builder