Skip to content
OpenAdvisories
Unscored CVE-2018-2455 EUVD-2018-14310GHSA-8576-fpqm-f7vg

SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_SEPA) does not perform …

Published Sep 11, 2018 · Updated Aug 5, 2024 · Assigned by sap

Description

SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_SEPA) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

VendorProductAffectedFixed
SAP SAP Enterprise Financial Services = 6.05, = 6.06, = 6.16, = 6.17, = 6.18, = 8.0 —

References