CVEvulnerability
CVE-2026-0511
8.1 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-01-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Weaknesses
- CWE-862
Description
SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted.
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://me.sap.com/notes/3565506 me.sap.com
- https://url.sap/sapsecuritypatchday url.sap