VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Apr 24, 2020· Updated Jun 17, 2026

CVE-2020-6212

CVE-2020-6212

Description

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.

Affected products

12
  • SAP/ERP4 versions
    cpe:2.3:a:sap:erp:607:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:sap:erp:607:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp:618:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp:730:*:*:*:*:*:*:*
    • (no CPE)range: 618, 730
  • SAP/S\/4hana5 versions
    cpe:2.3:a:sap:s\/4hana:100:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:s\/4hana:100:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:101:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:102:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:103:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:104:*:*:*:*:*:*:*
  • SAP/S/4HANAllm-fuzzy
    Range: 100, 101, 102, 103, 104
  • SAP SE/SAP ERPv5
    Range: < 618
  • SAP SE/SAP S/4 HANAv5
    Range: < 100

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.