Riskcovery

CVE-2020-6188

State
Published
Severity
6.3 Medium
Published
Feb 12, 2020
Updated
Aug 4, 2024
Reserved
Jan 8, 2020

Read the record on cve.org

Description

VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.

Scores

CVSSScoreVectorSource
3.06.3 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:Nsap

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SAP ERP (SAP_APPL)SAP SE
  • = 6.0Affected
  • = 6.02Affected
  • = 6.03Affected
  • = 6.04Affected
  • = 6.05Affected
  • = 6.06Affected
  • = 6.16Affected
SAP ERP (SAP_FIN)SAP SE
  • = 6.17Affected
  • = 6.18Affected
  • = 7.0Affected
  • = 7.20Affected
  • = 7.30Affected
SAP S/4 HANA (S4CORE)SAP SE
  • = 1.0Affected
  • = 1.01Affected
  • = 1.02Affected
  • = 1.03Affected
  • = 1.04Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.