VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Nov 10, 2020· Updated Jun 17, 2026

CVE-2020-6316

CVE-2020-6316

Description

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.

Affected products

18
  • SAP/ERP10 versions
    cpe:2.3:a:sap:erp:600:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:sap:erp:600:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp:602:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp:603:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp:604:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp:605:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp:606:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp:616:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp:617:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp:618:*:*:*:*:*:*:*
    • (no CPE)
  • SAP/S\/4hana5 versions
    cpe:2.3:a:sap:s\/4hana:100:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:sap:s\/4hana:100:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:101:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:102:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:103:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:104:*:*:*:*:*:*:*
  • SAP/S/4HANAllm-create
  • SAP SE/SAP ERPv5
    Range: < 600
  • SAP SE/SAP S/4 HANAv5
    Range: < 100

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.