Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-24739 EUVD-2024-22138GHSA-r4h7-p578-p9gv

Missing authorization check in SAP BAM (Bank Account Management)

Published Feb 13, 2024 · Updated May 9, 2025 · Assigned by sap

Description

SAP Bank Account Management (BAM) allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP BAM (Bank Account Management) SAP_FIN 618, SAP_FIN 730, S4CORE 100, 101 —

Advisories 1

References