CVEvulnerability
CVE-2026-0494
4.3 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-01-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-497
Description
Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and availability are not impacted.
Related
Weakness · CWE (1)
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere weakness
References
- https://me.sap.com/notes/3655227 me.sap.com
- https://url.sap/sapsecuritypatchday url.sap