SAP SE SAP Enterprise Financial Services (S4Core) vulnerabilities
3 vulnerabilities
Known vulnerabilities in SAP SE SAP Enterprise Financial Services (S4Core), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-2419sap sesap enterprise financial services (ea-finserv)+5
EPSS score0.81%
SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.CVE-2018-2484sap sesap enterprise financial services (bank/cfm)+7EPSS score1.37%
SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.63_20) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.CVE-2019-0280sap sesap enterprise financial services (s4core)+2EPSS score1.12%
SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0; S4CORE 1.01, 1.02 and 1.03), does not perform necessary authorization checks for authorization objects T_DEAL_DP and T_DEAL_PD , resulting in escalation of privileges.