Description
SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP S/4HANA (Bank Account Application) | S4CORE 108 | — |
Advisories 2
- NCSC-2025-0186 Kwetsbaarheden verholpen in SAP Producten NCSC-NL (Netherlands) · Jun 10, 2025
- WID-SEC-2025-1264 SAP Software: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 9, 2025