CVSS: 8.1EPSS: 0%CPEs: 13EXPL: 0CVE-2020-6268
https://notcve.org/view.php?id=CVE-2020-6268
10 Jun 2020 — Statutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain restricted data leading to Missing Authorization Check. Statutory Reporting de Insurance Companies en SAP ERP (EA-FINSERV versiones - 600, 603, 604, 605, 606, 616, 617, 618, 800 y S4CORE versiones 101, 102, 103, 104) no... • https://launchpad.support.sap.com/#/notes/2906996 • CWE-862: Missing Authorization •
CVSS: 4.3EPSS: 0%CPEs: 13EXPL: 0CVE-2020-6204
https://notcve.org/view.php?id=CVE-2020-6204
10 Mar 2020 — The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) returns more records than it should be when selecting and displaying the contract number, leading to Missing Authorization Check. La consulta de selección en SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV versiones 600, 603, 604, 605, 606, 616, 617, 618, 800 y S4CORE versiones 101, 102, 103, 104), devu... • https://launchpad.support.sap.com/#/notes/2841874 • CWE-862: Missing Authorization •
CVSS: 8.8EPSS: 0%CPEs: 19EXPL: 0CVE-2018-2484
https://notcve.org/view.php?id=CVE-2018-2484
08 Jan 2019 — SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.63_20) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. SAP Enterprise Financial Services (solucionado en SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.63_20) no rea... • http://www.securityfocus.com/bid/106477 • CWE-862: Missing Authorization •
CVSS: 5.5EPSS: 0%CPEs: 11EXPL: 0CVE-2018-2419
https://notcve.org/view.php?id=CVE-2018-2419
09 May 2018 — SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) no realiza las comprobaciones necesarias de autorización para un usuario autenticado, lo que resulta en un escalado de privilegios. • http://www.securityfocus.com/bid/104116 • CWE-862: Missing Authorization •