Skip to content
OpenAdvisories
Low · 3.7 CVE-2018-2419 EUVD-2018-14274GHSA-mcjv-f7wr-jc6j

SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not per…

Published May 9, 2018 · Updated Aug 5, 2024 · Assigned by sap

Description

SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

VendorProductAffectedFixed
SAP SE SAP Enterprise Financial Services (SAPSCORE) 1.11, 1.12 —
SAP SE SAP Enterprise Financial Services (S4CORE) 1.01, 1.02 —
SAP SE SAP Enterprise Financial Services (EA-FINSERV) 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 —

References