Vulnerabilities > SAP > ERP EA Finserv

DATE CVE VULNERABILITY TITLE RISK
2020-06-10 CVE-2020-6268 Missing Authorization vulnerability in SAP ERP (Ea-Finserv) and ERP (S4Core)
Statutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain restricted data leading to Missing Authorization Check.
network
low complexity
sap CWE-862
8.1