Vulnerabilities > SAP > ERP Financial Accounting

DATE CVE VULNERABILITY TITLE RISK
2022-06-14 CVE-2022-31589 Unspecified vulnerability in SAP products
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
network
low complexity
sap
6.5
2021-09-14 CVE-2021-38164 Missing Authorization vulnerability in SAP ERP Financial Accounting
SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105, allows a registered attacker to invoke certain functions that would otherwise be restricted to specific users.
network
low complexity
sap CWE-862
5.4