CVE-2026-0496 — Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)

CVE-2026-0496

Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation) PUBLISHED

Description (CNA)

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file (including script files) without proper file format validation. This has low impact on confidentiality, integrity and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Fiori App (Intercompany Balance Reconciliation)	affected UIAPFI70 500; affected 600; affected 700; affected 800; affected 900; affected 901; affected 902; affected S4CORE 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108

CWE

CWE-434

References

https://me.sap.com/notes/3565506
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.