VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Apr 14, 2020· Updated Jun 17, 2026

CVE-2020-6233

CVE-2020-6233

Description

SAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500 and S4FPSL 100, allows an authenticated user to run an analysis report due to Missing Authorization Check, resulting in slowing the system.

Affected products

7
  • SAP/Banking Services From Sap3 versions
    cpe:2.3:a:sap:banking_services_from_sap:400:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:sap:banking_services_from_sap:400:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:banking_services_from_sap:450:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:banking_services_from_sap:500:*:*:*:*:*:*:*
  • SAP/S\/4hana Financial Products Subledger
    cpe:2.3:a:sap:s\/4hana_financial_products_subledger:100:*:*:*:*:*:*:*
  • SAP/S/4HANAllm-fuzzy
  • SAP SE/SAP S/4 HANA (Financial Products Subledger and Banking Services) (FSAPPL)v5
    Range: < 400
  • SAP SE/SAP S/4 HANA (Financial Products Subledger and Banking Services) (S4FPSL)v5
    Range: < 100

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.