CVE-2020-6212

The CVE-2020-6212 entry affects SAP ERP and SAP S/4HANA. Specifically, it concerns Egypt localization reports: Clearing of Liabilities, Remittance Statement, and Summary for SAP ERP versions 618, 730, EAPPLGLO 607, and SAP S/4 HANA versions 100–104. The root cause is Missing Authorization Check, ...

CVE-2020-6199

The CVE-2020-6199 entry concerns SAP ERP (MENA Certificate Management) components: EAPPGLO 607, SAP_FIN 618/730, and SAP S/4HANA MENA (S4CORE 100–104). The flaw is a Missing Authorization Check in the view FIMENAV_COMPCERT, allowing an attacker without an authorization group to maintain any compa...

CVE-2020-6188

The CVE-2020-6188 issue affects SAP ERP (SAP_APPL 600–606, 616; SAP_FIN 617–618, 700, 720, 730) and SAP S/4HANA (100–104). The root cause is missing authorization checks for an authenticated user, as described across multiple sources. This results in a Missing Authorization Check vulnerability wi...

CVE-2020-6316

CVE-2020-6316 relates to SAP ERP and SAP S/4 HANA where an authenticated user can view cost records linked to objects without proper authorization in PS reporting, due to a missing authorization check. The connected documents confirm the affected products and the basic impact (information disclos...

CVE-2026-0505

CVE-2026-0505 affects BSP applications where unauthenticated users can manipulate user-controlled URL parameters that are not sufficiently validated, resulting in unvalidated redirects to attacker-controlled websites. Root cause: insufficient validation of URL parameters. Impact per provided metr...

CVE-2026-24323

CVE-2026-24323 affects BSP applications of SAP Document Management System. An unauthenticated user can inject malicious script via user-controlled URL parameters that are not sufficiently sanitized, causing script execution in the victim’s browser. Impact is described as low for confidentiality a...