CVE-2019-0280
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2019
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0; S4CORE 1.01, 1.02 and 1.03), does not perform necessary authorization checks for authorization objects T_DEAL_DP and T_DEAL_PD , resulting in escalation of privileges.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP Treasury and Risk Management(EA-FINSERV)
- Vendor
- SAP SE
- Product
- SAP Treasury and Risk Management(EA-FINSERV)
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| < 6.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 6.03 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 6.04 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 6.05 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 6.06 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 6.16 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 6.17 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 6.18 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 8.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
SAP Enterprise Financial Services (S4CORE)
- Vendor
- SAP SE
- Product
- SAP Enterprise Financial Services (S4CORE)
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| < 1.01 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 1.02 | affected | Unavailable | Unavailable | Unavailable | None listed |
| < 1.03 | affected | Unavailable | Unavailable | Unavailable | None listed |