Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2020-6316

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.

  • Published: Nov 10, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-6316
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

Software From Fixed in
sap / s/4hana 100 100.x
sap / erp 618 618.x
sap / s/4hana 101 101.x
sap / s/4hana 102 102.x
sap / s/4hana 103 103.x
sap / s/4hana 104 104.x
sap / erp 617 617.x
sap / erp 616 616.x
sap / erp 606 606.x
sap / erp 605 605.x
sap / erp 604 604.x
sap / erp 603 603.x
sap / erp 602 602.x
sap / erp 600 600.x