| Package | Affected versions | Patched versions |
|---|---|---|
| enterprise extension financial services | = 6.0= 6.03= 6.04= 6.05= 6.06= 6.16= 6.17= 6.18= 8.0 | |
| treasury and risk management (s4core) | = 1.01= 1.02= 1.03= 1.04 |
Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01, 1.02, 1.03, 1.04 and EA-FINSERV versions 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free