SAP Enterprise Financial Services vulnerabilities

3 CVEs affecting SAP Enterprise Financial Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-21486, published 2021-03-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-2455, published 2018-09-11. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_SEPA) does not perform necessary authorization checks for an authenticated user,…
CVE-2018-2454, published 2018-09-11. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 (in business function EAFS_BCA_BUSOPR_2) does not perform necessary authorization checks for an authenticated user,…
CVE-2021-21486, published 2021-03-09. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does not perform necessary authorization checks for an authenticated user, resulting…