VYPR
← All advisories
High severity8.8NVD Advisory· Published Feb 12, 2020· Updated Jun 17, 2026

CVE-2020-6188

CVE-2020-6188

Description

VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.

Affected products

12
  • SAP/ERP2 versions
    cpe:2.3:a:sap:erp:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:erp:6.0:*:*:*:*:*:*:*
    • (no CPE)range: 600, 602, 603, 604, 605, 606, 616
  • SAP/S\/4 Hana5 versions
    cpe:2.3:a:sap:s\/4_hana:1511:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:s\/4_hana:1511:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4_hana:1610:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4_hana:1709:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4_hana:1809:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4_hana:1909:*:*:*:*:*:*:*
  • SAP/Hanallm-fuzzy
    Range: 100, 101, 102, 103, 104
  • SAP/SAP_FINllm-fuzzy
    Range: 617, 618, 700, 720, 730
  • SAP SE/SAP ERP (SAP_APPL)v5
    Range: = 6.0
  • SAP SE/SAP ERP (SAP_FIN)v5
    Range: = 6.17
  • SAP SE/SAP S/4 HANA (S4CORE)v5
    Range: = 1.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.