PT-2026-2331 · Sap · Sap Fiori App Intercompany Balance Reconciliation

Published 2026-01-13 · Updated 2026-01-13 · CVE-2026-0495

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions SAP Fiori App Intercompany Balance Reconciliation (affected versions not specified)

Description The application allows an attacker with high privileges to send uploaded files to arbitrary emails, potentially enabling phishing campaigns. The issue has a low impact on the confidentiality, integrity, and availability of the application. The vulnerability involves the ability to send uploaded files via email to unintended recipients.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-15

Related Identifiers

CVE-2026-0495

Affected Products

Sap Fiori App Intercompany Balance Reconciliation

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-0495 · Security Note
• https://twitter.com/VulmonFeeds/status/2011006511863009678 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://me.sap.com/notes/3565506 · Note
• https://twitter.com/CVEnew/status/2010911107758616701 · Twitter Post