PT-2026-2331 · Sap · Sap Fiori App Intercompany Balance Reconciliation

Publicado 2026-01-13 · Atualizado 2026-01-13 · CVE-2026-0495

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Média

Vetor base

AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions SAP Fiori App Intercompany Balance Reconciliation (affected versions not specified)

Description The application allows an attacker with high privileges to send uploaded files to arbitrary emails, potentially enabling phishing campaigns. The issue has a low impact on the confidentiality, integrity, and availability of the application. The vulnerability involves the ability to send uploaded files via email to unintended recipients.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-15

Identificadores relacionados

CVE-2026-0495

Produtos afetados

Sap Fiori App Intercompany Balance Reconciliation

Referências · 5

• https://twitter.com/VulmonFeeds/status/2011006511863009678 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-0495 · Nota de Segurança
• https://url.sap/sapsecuritypatchday · Nota
• https://me.sap.com/notes/3565506 · Nota
• https://twitter.com/CVEnew/status/2010911107758616701 · Publicação no Twitter