CVE-2026-0495

Published: Jan 13, 2026Modified: Jun 17, 2026Deferred

5.1

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L

Exploitability: 1.0 / Impact: 3.7

Source: CNA (Secondary)

Description

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application.

Related CWEs

CWE-15

External Control of System or Configuration Setting

One or more system settings or configuration elements can be externally controlled by a user.

References (2)

https://me.sap.com/notes/3565506

Source: cna@sap.com

https://url.sap/sapsecuritypatchday

Source: cna@sap.com

Timeline

No history available yet.