Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-23683 EUVD-2026-4844GHSA-rf6x-mpch-366q

Missing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation)

Published Jan 27, 2026 · Updated Feb 26, 2026 · Assigned by sap

Description

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Fiori App (Intercompany Balance Reconciliation) S4CORE 102, 103, 104, 105, 106 —

References