CVE-2026-23683

MEDIUM

SAP Fiori App Intercompany Balance Reconciliation - Privilege Escal...

Title source: llm
STIX 2.1

Description

SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has low impact on confidentiality, integrity and availability are not impacted.

References (2)

Core 2
Core References

Scores

CVSS v3 4.3
EPSS 0.0004
EPSS Percentile 11.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-862
Status published
Products (5)
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 103
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 104
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 105
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) 106
SAP_SE/SAP Fiori App (Intercompany Balance Reconciliation) S4CORE 102
Published Jan 27, 2026
Tracked Since Feb 18, 2026