CVEvulnerability

CVE-2021-38164

5.4 MEDIUM Published 2021-09-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-09-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 3.0 ([email protected])
5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected])
5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
Weaknesses
CWE-862

Description

SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105, allows a registered attacker to invoke certain functions that would otherwise be restricted to specific users. These functions are normally exposed over the network and once exploited the attacker may be able to view and modify financial accounting data that only a specific user should have access to.

Affected configurations

• sap erp financial accounting 100 • sap erp financial accounting 101 • sap erp financial accounting 102 • sap erp financial accounting 103 • sap erp financial accounting 104 • sap erp financial accounting 105 • sap erp financial accounting 602 • sap erp financial accounting 603 • sap erp financial accounting 604 • sap erp financial accounting 605 • sap erp financial accounting 606 • sap erp financial accounting 616 • sap erp financial accounting 618 • sap erp financial accounting 700 • sap erp financial accounting 720 • sap erp financial accounting 730 • sap erp financial accounting s4core • sap erp financial accounting sap appl - 600 • sap erp financial accounting sap fin - 617 • sap erp financial accounting sapscore - 125

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References