VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 10, 2020· Updated Jun 17, 2026

CVE-2020-6204

CVE-2020-6204

Description

The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) returns more records than it should be when selecting and displaying the contract number, leading to Missing Authorization Check.

Affected products

17
  • SAP/Treasury And Risk Management \(ea Finserv\)9 versions
    cpe:2.3:a:sap:treasury_and_risk_management_\(ea-finserv\):600:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:sap:treasury_and_risk_management_\(ea-finserv\):600:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(ea-finserv\):603:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(ea-finserv\):604:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(ea-finserv\):605:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(ea-finserv\):606:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(ea-finserv\):616:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(ea-finserv\):617:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(ea-finserv\):618:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(ea-finserv\):800:*:*:*:*:*:*:*
  • SAP/Treasury And Risk Management \(s4core\)4 versions
    cpe:2.3:a:sap:treasury_and_risk_management_\(s4core\):101:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:treasury_and_risk_management_\(s4core\):101:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(s4core\):102:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(s4core\):103:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:treasury_and_risk_management_\(s4core\):104:*:*:*:*:*:*:*
  • SAP/SAP Treasury and Risk Managementllm-fuzzy
    Range: 600, 603, 604, 605, 606, 616, 617, 618, 800, 101, 102, 103, 104
  • SAP/S4COREllm-fuzzy
    Range: 101, 102, 103, 104
  • SAP SE/SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV)v5
    Range: < 600
  • SAP SE/SAP Treasury and Risk Management (Transaction Management) (S4CORE)v5
    Range: < 101

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.