Authorization Check Bypass in SAP ERP Statutory Reporting
CVE-2020-6268
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 10 June 2020
What is CVE-2020-6268?
The Statutory Reporting component of SAP ERP is vulnerable due to the absence of essential authorization checks for authenticated users. This flaw allows attackers to access and manipulate sensitive data that should be restricted, leading to potential data integrity issues. It primarily affects several versions of the EA-FINSERV and S4CORE products, making it critical for organizations to address this vulnerability to protect their data and maintain compliance.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
SAP ERP (Statutory Reporting for Insurance Companies) < EA-FINSERV 600 < EA-FINSERV 600
SAP ERP (Statutory Reporting for Insurance Companies) < 603 < 603
SAP ERP (Statutory Reporting for Insurance Companies) < 604 < 604
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved