CVE-2026-0511

Summary

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted.

Affected Software

VendorProductVersion RangeStatus
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)UIAPFI70 500affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)600affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)700affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)800affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)900affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)901affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)902affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)S4CORE 102affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)103affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)104affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)105affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)106affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)107affected
SAP_SESAP Fiori App (Intercompany Balance Reconciliation)108affected

Weaknesses

  • CWE-862: CWE-862: Missing Authorization

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References