SAP SE SAP Fiori App (Intercompany Balance Reconciliation) vulnerabilities
6 vulnerabilities
Known vulnerabilities in SAP SE SAP Fiori App (Intercompany Balance Reconciliation), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-0495sap_sesap fiori app (intercompany balance reconciliation)
EPSS score0.18%
SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application.CVE-2026-0511sap_sesap fiori app (intercompany balance reconciliation)EPSS score0.30%
SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has high impact on confidentiality and integrity of the application ,availability is not impacted.CVE-2026-0494sap_sesap fiori app (intercompany balance reconciliation)EPSS score0.22%
Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and availability are not impacted.CVE-2026-0493sap_sesap fiori app (intercompany balance reconciliation)EPSS score0.13%
Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on behalf of an authenticated user causing low impact on integrity of the system. This has no impact on confidentiality and availability.CVE-2026-0496sap_sesap fiori app (intercompany balance reconciliation)EPSS score0.22%
SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file (including script files) without proper file format validation. This has low impact on confidentiality, integrity and availability of the application.CVE-2026-23683sap_sesap fiori app (intercompany balance reconciliation)EPSS score0.20%
SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted.