CVE-2026-0493: fallo de gravedad media en SAP_SE SAP Fiori App (Intercompany Balance…
Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.3epss 0.1%
Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on behalf of an authenticated user causing low impact on integrity of the system. This has no impact on confidentiality and availability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Productos afectados
SAP_SE · SAP Fiori App (Intercompany Balance Reconciliation)CVEs relacionadas — SAP_SE SAP Fiori App (Intercompany Balance…
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-0511HIGHMultiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)EPSS 0.3%CVE-2026-0496MEDIUMMultiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)EPSS 0.2%CVE-2026-0494MEDIUMInformation Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)EPSS 0.2%CVE-2026-23683MEDIUMMissing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation)EPSS 0.2%CVE-2026-0495MEDIUMMultiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)EPSS 0.2%