Riskcovery

CVE-2019-0280

State
Published
Severity
Not scored
Published
May 14, 2019
Updated
Aug 4, 2024
Reserved
Nov 26, 2018

Read the record on cve.org

Description

SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0; S4CORE 1.01, 1.02 and 1.03), does not perform necessary authorization checks for authorization objects T_DEAL_DP and T_DEAL_PD , resulting in escalation of privileges.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SAP Treasury and Risk Management(EA-FINSERV)SAP SE
  • < 6.0Affected
  • < 6.03Affected
  • < 6.04Affected
  • < 6.05Affected
  • < 6.06Affected
  • < 6.16Affected
  • < 6.17Affected
  • < 6.18Affected
  • < 8.0Affected
SAP Enterprise Financial Services (S4CORE)SAP SE
  • < 1.01Affected
  • < 1.02Affected
  • < 1.03Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.