Sap Fiori Apps (Posting Library)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_fiori_apps_(posting_library):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Fiori Apps (Posting Library) (2d98db00-bce9-5e83-8cbc-081944d4e743) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-26660 |
vulnerable | 2026-06-08 07:14:49.949741 |
Broken Access Control in SAP Fiori apps (Posting Library)
MEDIUM (4.3)
SAP Fiori applications using the posting library fail to properly configure security settings during the setup process, leaving them at default or inadequately defined. This vulnerability allows an attacker with low privileges to bypass access controls within the application, enabling them to potentially modify data. Confidentiality and Availability are not impacted.
Published: 2025-03-11T00:36:54.383Z
Updated: 2025-03-11T14:13:59.512Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.