CVE-2018-2455

SAP Enterprise Financial Services (versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) is affected in the EAFS_BCA_BUSOPR_SEPA function by a lack of authorization checks for an authenticated user, enabling escalation of privileges. This vulnerability is documented as CVE-2018-2455 across multiple sources...

CVE-2021-21486

CVE-2021-21486 affects SAP Enterprise Financial Services versions 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, and 800, where an authenticated user can bypass authorization checks and escalate privileges. The issue’s root cause is improper authorization checks within the SAP E...

CVE-2018-2454

CVE-2018-2454 affects SAP Enterprise Financial Services versions 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0 in the function EAFS_BCA_BUSOPR_2 . The issue arises from missing authorization checks for an authenticated user, enabling an escalation of privileges. NVD reports CVSSv3.0 base score 8.8 (HIGH) ...