Approved changes feed: RSS · Atom

cpe:2.3:a:sap:erp:618:*:*:*:*:*:*:*

part: a version: 618 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductErp (f113dfc0-7bf7-502d-9d72-27b39a165906)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-24323 vulnerable 2026-06-08 07:51:17.509692 Multiple vulnerabilities in BSP Applications of SAP Document Management System
MEDIUM (6.1)
The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized. When a victim accesses a crafted URL, the injected script is executed in the victim�s browser, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application.
Published: 2026-02-10T03:04:11.848Z
Updated: 2026-02-10T16:22:54.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0505 vulnerable 2026-06-08 07:47:12.425139 Multiple vulnerabilities in BSP Applications of SAP Document Management System
MEDIUM (6.1)
The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in unvalidated redirection to attacker-controlled websites, leading to a low impact on confidentiality and integrity, and no impact on the availability of the application.
Published: 2026-02-10T03:01:30.818Z
Updated: 2026-02-10T16:28:31.245Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6316 vulnerable 2026-06-08 05:26:45.118768 Details available
MEDIUM (4.3)
SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.
Published: 2020-11-10T16:11:29.000Z
Updated: 2024-08-04T08:55:22.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6212 vulnerable 2026-06-08 05:26:44.755708 Details available
MEDIUM (5.4)
Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.
Published: 2020-04-24T22:18:54.000Z
Updated: 2024-08-04T08:55:22.053Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.