PT-2026-4838 · Sap · Sap Fiori App Intercompany Balance Reconciliation

Published 2026-01-27 · Updated 2026-01-27 · CVE-2026-23683

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Fiori App Intercompany Balance Reconciliation (affected versions not specified)

Description The SAP Fiori App Intercompany Balance Reconciliation does not implement proper authorization checks for authenticated users, potentially allowing for privilege escalation. The issue has a low impact on confidentiality, and does not affect integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-23683

Affected Products

Sap Fiori App Intercompany Balance Reconciliation

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-23683 · Security Note
• https://twitter.com/CVEnew/status/2015988789273923857 · Twitter Post
• https://t.me/CVEtracker/43031 · Telegram Post
• https://t.me/cveNotify/149941 · Telegram Post
• https://url.sap/sapsecuritypatchday · Note
• https://me.sap.com/notes/3122486 · Note