SAP ERP Financial Accounting vulnerabilities

2 CVEs affecting SAP ERP Financial Accounting, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31589, published 2022-06-14.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-31589, published 2022-06-14. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction,…
• CVE-2021-38164, published 2021-09-14. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105,…