CVE-2020-6311: SAP Bank Analyzer
Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.
Banking services from SAP 9.0 (Bank Analyzer), version - 500, and SAP S/4HANA for financial products subledger, version � 100, does not correctly perform necessary authorization checks for an authenticated user due to Improper Authorization checks, that may cause a system administrator to create incorrect authorization proposals. This may result in privilege escalation and may expose restricted banking data.
Affected products
Published 2020-09-09. Last modified 2026-06-17.