CVE-2020-6212

published 2020-04-24

CVE-2020-6212: Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA…

Priority P4 28 medium 5.4 CVSS 3.1

AV N AC L PR L UI N S U C L I L A N

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
sap	erp	—	—
sap	erp	—	—
sap	erp	—	—
sap	s_4hana	—	—
sap	s_4hana	—	—
sap	s_4hana	—	—
sap	s_4hana	—	—
sap	s_4hana	—	—
sap_se	sap_erp	< 618	618
sap_se	sap_erp	< 730	730
sap_se	sap_erp	< EAPPLGLO 607	EAPPLGLO 607
sap_se	sap_s_4_hana	< 100	100
sap_se	sap_s_4_hana	< 101	101
sap_se	sap_s_4_hana	< 102	102
sap_se	sap_s_4_hana	< 103	103
sap_se	sap_s_4_hana	< 104	104

CVSS provenance

nvd v3.1 5.4 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

nvd v3.0 5.4 MEDIUM CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

nvd v2.0 5.5 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-862