CVE-2020-6233: SAP Banking Services From SAP

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

SAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500 and S4FPSL 100, allows an authenticated user to run an analysis report due to Missing Authorization Check, resulting in slowing the system.

Affected products

• SAP Banking Services From SAP: version 400 only; version 450 only; version 500 only
• SAP s/4hana Financial Products Subledger: version 100 only

Published 2020-04-14. Last modified 2026-06-17.