CVE-2020-6188: SAP ERP

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.

Affected products

• SAP ERP: version 6.0 only
• SAP s/4 Hana: version 1511 only; version 1610 only; version 1709 only; version 1809 only; version 1909 only

Published 2020-02-12. Last modified 2026-06-17.