CVE-2026-0493

MEDIUM

SAP Fiori App Intercompany Balance Reconciliation - CSRF

Title source: llm
STIX 2.1

Description

Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on behalf of an authenticated user causing low impact on integrity of the system. This has no impact on confidentiality and availability.

References (2)

Core 2
Core References

Scores

CVSS v3 4.3
EPSS 0.0003
EPSS Percentile 7.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-352
Status published
Products (16)
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 103
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 104
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 105
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 106
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 107
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 108
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 109
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 600
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 700
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 800
... and 6 more
Published Jan 13, 2026
Tracked Since Feb 18, 2026