CVE-2026-0494 — Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)

CVE-2026-0494

Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation) PUBLISHED

Description (CNA)

Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and availability are not impacted.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Fiori App (Intercompany Balance Reconciliation)	affected UIAPFI70 500; affected 600; affected 700; affected 800; affected 900; affected 901; affected 902; affected UIS4H 109

CWE

CWE-497

References

https://me.sap.com/notes/3655227
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.