CVE-2026-0495 — Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)

CVE-2026-0495

Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation) PUBLISHED

Description (CNA)

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Fiori App (Intercompany Balance Reconciliation)	affected UIAPFI70 500; affected 600; affected 700; affected 800; affected 900; affected 901; affected 902; affected S4CORE 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108

CWE

CWE-15

References

https://me.sap.com/notes/3565506
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.