Lucene search
+L

37 matches found

RedhatCVE
RedhatCVE
•added 2026/02/11 7:30 a.m.•10 views

CVE-2026-23688

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS5.5AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/10 4:16 a.m.•16 views

CVE-2026-23688

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS0.00164EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/10 3:02 a.m.•47 views

CVE-2026-23688 Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS0.00164EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/10 3:02 a.m.•6 views

CVE-2026-23688 Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)

SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on integrity, confidentiality and availability are not impacted...

4.3CVSS5.5AI score0.00164EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/01/23 12:00 a.m.•15 views

The vulnerability of the SAP Fiori App web application, related to the falsification of cross-site requests, allows a hacker to compromise the integrity of the protected information.

The vulnerability of the SAP Fiori App relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

4.3CVSS5.6AI score0.00126EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/01/23 12:00 a.m.•10 views

The vulnerability of the SAP Fiori App web application, related to the disclosure of system data by unauthorized parties in the controlled area, allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP Fiori App relates to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

4.3CVSS5.8AI score0.00213EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/14 1:22 a.m.•14 views

CVE-2026-0494

Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and availability are not impacted...

4.3CVSS6.6AI score0.00213EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/14 1:22 a.m.•13 views

CVE-2026-0511

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted...

8.1CVSS7AI score0.00296EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/14 1:22 a.m.•12 views

CVE-2026-0495

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application...

5.1CVSS6.8AI score0.00175EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/13 1:15 a.m.•59 views

CVE-2026-0511

The CVE-2026-0511 issue affects SAP Fiori App Intercompany Balance Reconciliation. The vulnerability is due to missing authorization checks for an authenticated user, enabling privilege escalation. Impact is high on confidentiality and integrity; availability is not affected. The issue is corrobo...

8.1CVSS6.7AI score0.00296EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/13 1:15 a.m.•7 views

CVE-2026-0511 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted...

8.1CVSS5.3AI score0.00296EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/13 1:13 a.m.•39 views

CVE-2026-0496 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file including script files without proper file format validation. This has low impact on confidentiality, integrity and availability of the application...

6.6CVSS0.00217EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/13 1:13 a.m.•43 views

CVE-2026-0495

CVE-2026-0495 affects SAP Fiori App Intercompany Balance Reconciliation. A high-privilege attacker can cause the application to send uploaded files to arbitrary email addresses, enabling phishing campaigns. Impact on confidentiality, integrity and availability is described as low. The provided do...

5.1CVSS6.5AI score0.00175EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/13 1:13 a.m.•47 views

CVE-2026-0493

CVE-2026-0493 describes a Cross-Site Request Forgery in the SAP Fiori App Intercompany Balance Reconciliation. The issue could allow an attacker to trigger state-changing actions on behalf of an authenticated user by using an inappropriate request type, with low impact on integrity and no impact ...

4.3CVSS6.5AI score0.00126EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/13 1:13 a.m.•43 views

CVE-2026-0493 Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on...

4.3CVSS0.00126EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•32 views

PT-2026-2343

Name of the Vulnerable Software and Affected Versions SAP Fiori App Intercompany Balance Reconciliation affected versions not specified Description The SAP Fiori App Intercompany Balance Reconciliation does not implement proper authorization checks for authenticated users, potentially allowing fo...

8.1CVSS6.4AI score0.00296EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•12 views

SAP Fiori App Intercompany Balance Reconciliation 安全漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A security vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation, which arises from the ability to access restricted information under certain conditions, causing a low impact on...

4.3CVSS5.8AI score0.00213EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•14 views

SAP Fiori App Intercompany Balance Reconciliation 跨站请求伪造漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A cross-site request forgery vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation, which originates from a cross-site request forgery and could allow an attacker to perform a state...

4.3CVSS5.8AI score0.00126EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•15 views

PT-2026-2332

Name of the Vulnerable Software and Affected Versions SAP Fiori App Intercompany Balance Reconciliation affected versions not specified Description The application allows an attacker with high privileges to upload any file, including script files, without proper file format validation. This has a...

6.6CVSS6.5AI score0.00217EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•10 views

SAP Fiori App Intercompany Balance Reconciliation 安全漏洞

SAP Fiori App Intercompany Balance Reconciliation is a financial application from SAP, Germany. A security vulnerability exists in SAP Fiori App Intercompany Balance Reconciliation that stems from a failure to perform required authorization checks on authenticated users, which could result in...

8.1CVSS5.8AI score0.00296EPSS
SaveExploits0References2
Rows per page
Query Builder