Medium severity5.3NVD Advisory· Published Mar 10, 2022· Updated Jun 17, 2026
CVE-2022-26104
CVE-2022-26104
Description
SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user to alter the maintenance system message.
Affected products
3cpe:2.3:a:sap:financial_consolidation:10.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:financial_consolidation:10.1:*:*:*:*:*:*:*
- (no CPE)range: 10.1
- SAP SE/SAP Financial Consolidationv5Range: < 10.1
Patches
Vulnerability mechanics
References
2- dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htmnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
News mentions
0No linked articles in our index yet.