CVEvulnerability
CVE-2026-23683
4.3 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-862
Description
SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted.
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://me.sap.com/notes/3122486 me.sap.com
- https://url.sap/sapsecuritypatchday url.sap