SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Search vulnerabilities
CVE-2021-21486
CVSS 3.1 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2018-2455
SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_SEPA) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
CVSS 3.0 · 8.8 High
EPSS 1.3%
KEV · Not listed
Vendors
Products
CVE-2018-2454
SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_2) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
CVSS 3.0 · 8.8 High
EPSS 1.3%
KEV · Not listed
Vendors
Products
Page 1 of 1.