CVE-2020-6316: SAP ERP

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.

Affected products

• SAP ERP: version 600 only; version 602 only; version 603 only; version 604 only; version 605 only; version 606 only; …
• SAP s/4hana: version 100 only; version 101 only; version 102 only; version 103 only; version 104 only

Published 2020-11-10. Last modified 2026-06-17.