SAP s/4hana Financial Products Subledger vulnerabilities

2 CVEs affecting SAP s/4hana Financial Products Subledger, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-6233, published 2020-04-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-0276, published 2019-03-12. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. Banking services from SAP 9.0 (FSAPPL version 5) and SAP S/4HANA Financial Products Subledger (S4FPSL, version 1) performs an inadequate authorization check for an authenticated user, potentially…
CVE-2020-6233, published 2020-04-14. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. SAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500 and S4FPSL 100, allows an authenticated user to run an analysis report due to Missing Authorization…