cveboard RSS feed

CVE-2020-6316

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2020
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SAP ERP

Vendor
SAP SE
Product
SAP ERP
Platforms
Unknown
Default status
Unknown
SAP ERP · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
< 600affectedUnavailableUnavailableUnavailableNone listed
< 602affectedUnavailableUnavailableUnavailableNone listed
< 603affectedUnavailableUnavailableUnavailableNone listed
< 604affectedUnavailableUnavailableUnavailableNone listed
< 605affectedUnavailableUnavailableUnavailableNone listed
< 606affectedUnavailableUnavailableUnavailableNone listed
< 616affectedUnavailableUnavailableUnavailableNone listed
< 617affectedUnavailableUnavailableUnavailableNone listed
< 618affectedUnavailableUnavailableUnavailableNone listed

SAP S/4 HANA

Vendor
SAP SE
Product
SAP S/4 HANA
Platforms
Unknown
Default status
Unknown
SAP S/4 HANA · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
< 100affectedUnavailableUnavailableUnavailableNone listed
< 101affectedUnavailableUnavailableUnavailableNone listed
< 102affectedUnavailableUnavailableUnavailableNone listed
< 103affectedUnavailableUnavailableUnavailableNone listed
< 104affectedUnavailableUnavailableUnavailableNone listed