CVE-2022-31589

CVE-2022-31589 impact details from a PT-Security note describe an improper authorization check affecting the SHAAM program’s Israeli File usage, specifically the /ATL/VQ23 transaction (API Endpoint). This can grant business users more than requested permissions, potentially allowing access to dat...

CVE-2021-38164

CVE-2021-38164 affects SAP ERP Financial Accounting (RFOPENPOSTING_FR) across multiple SAP_APPL, SAP_FIN, SAPSCORE, and S4CORE versions. The issue allows a registered attacker to invoke functions that should be restricted to specific users, with the functions typically exposed over the network, e...