High severity8.8NVD Advisory· Published Mar 9, 2021· Updated Jun 17, 2026
CVE-2021-21486
CVE-2021-21486
Description
SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Affected products
16cpe:2.3:a:sap:enterprise_financial_services:1.01:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:sap:enterprise_financial_services:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:1.02:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:1.03:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:1.04:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:1.05:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:6.00:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:6.03:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:6.04:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:6.05:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:6.06:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:6.16:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:6.17:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:6.18:*:*:*:*:*:*:*
- cpe:2.3:a:sap:enterprise_financial_services:8.0:*:*:*:*:*:*:*
- (no CPE)range: 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800
- SAP SE/SAP Enterprise Financial Services (Bank Customer Accounts)v5Range: < 101
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
News mentions
0No linked articles in our index yet.