Sap Erp Financial Accounting vulnerabilities

2 known vulnerabilities affecting sap/erp_financial_accounting.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2022-31589MEDIUMCVSS 6.5v618v7202022-06-14

CVE-2022-31589 [MEDIUM] CWE-863 CVE-2022-31589: Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.

CVE-2021-38164MEDIUMCVSS 5.4v100v101+18 more2021-09-14

CVE-2021-38164 [MEDIUM] CWE-862 CVE-2021-38164: SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105, allows a registered attacker to invoke certain functions that would otherwise be restricted to specific users. These functions are normally exposed over the n