CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
42.8%
VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.
Vendor | Product | Version | CPE |
---|---|---|---|
sap | erp | 6.0 | cpe:2.3:a:sap:erp:6.0:*:*:*:*:*:*:* |
sap | s\/4_hana | 1511 | cpe:2.3:a:sap:s\/4_hana:1511:*:*:*:*:*:*:* |
sap | s\/4_hana | 1610 | cpe:2.3:a:sap:s\/4_hana:1610:*:*:*:*:*:*:* |
sap | s\/4_hana | 1709 | cpe:2.3:a:sap:s\/4_hana:1709:*:*:*:*:*:*:* |
sap | s\/4_hana | 1809 | cpe:2.3:a:sap:s\/4_hana:1809:*:*:*:*:*:*:* |
sap | s\/4_hana | 1909 | cpe:2.3:a:sap:s\/4_hana:1909:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
42.8%