| Package | Affected versions | Patched versions |
|---|---|---|
| bank/cfm | = 4.63_20 | |
| ea-finserv | = 1.10= 2.0= 5.0= 6.0= 6.03= 6.04= 6.05= 6.06= 6.16= 6.17= 6.18= 8.0 | |
| s4core | = 1.01= 1.02= 1.03 | |
| sapscore | = 1.13= 1.14= 1.15 |
SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.63_20) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free