CVE-2020-6199

The view FIMENAVCOMPCERT in SAP ERP MENA Certificate Management, EAPPGLO version 607, SAPFIN versions- 618, 730 and SAP S/4HANA MENA Certificate Management, S4CORE versions- 100, 101, 102, 103, 104; does not have any authorization check to it due to which an attacker without an authorization grou...

CVE-2020-6199

The CVE-2020-6199 entry concerns SAP ERP (MENA Certificate Management) components: EAPPGLO 607, SAP_FIN 618/730, and SAP S/4HANA MENA (S4CORE 100–104). The flaw is a Missing Authorization Check in the view FIMENAV_COMPCERT, allowing an attacker without an authorization group to maintain any compa...

CVE-2018-2381: Missing Authorization

SAP ERP Financials Information System SAPAPPL 6.00, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16; SAPFIN 6.17, 6.18, 7.00, 7.20, 7.30 S4CORE 1.00, 1.01, 1.02 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...