Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0; S4CORE 1.01, 1.02 and 1.03), does not perform necessary authorization checks for authorization objects T_DEAL_DP and T_DEAL_PD , resulting in escalation of privileges.

Product Status

Learn more

Versions 9 Total

Default Status: unknown

affected

  • affected at < 6.0 
  • affected at < 6.03 
  • affected at < 6.04 
  • affected at < 6.05 
  • affected at < 6.06 
  • affected at < 6.16 
  • affected at < 6.17 
  • affected at < 6.18 
  • affected at < 8.0 

Versions 3 Total

Default Status: unknown

affected

  • affected at < 1.01 
  • affected at < 1.02 
  • affected at < 1.03 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.