CVE-2021-38164
First published: Tue Sep 14 2021(Updated: )
SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105, allows a registered attacker to invoke certain functions that would otherwise be restricted to specific users. These functions are normally exposed over the network and once exploited the attacker may be able to view and modify financial accounting data that only a specific user should have access to.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP ERP Financial Accounting | =100 | |
| SAP ERP Financial Accounting | =101 | |
| SAP ERP Financial Accounting | =102 | |
| SAP ERP Financial Accounting | =103 | |
| SAP ERP Financial Accounting | =104 | |
| SAP ERP Financial Accounting | =105 | |
| SAP ERP Financial Accounting | =602 | |
| SAP ERP Financial Accounting | =603 | |
| SAP ERP Financial Accounting | =604 | |
| SAP ERP Financial Accounting | =605 | |
| SAP ERP Financial Accounting | =606 | |
| SAP ERP Financial Accounting | =616 | |
| SAP ERP Financial Accounting | =618 | |
| SAP ERP Financial Accounting | =700 | |
| SAP ERP Financial Accounting | =720 | |
| SAP ERP Financial Accounting | =730 | |
| SAP ERP Financial Accounting | =s4core | |
| SAP ERP Financial Accounting | =sap_appl_-_600 | |
| SAP ERP Financial Accounting | =sap_fin_-_617 | |
| SAP ERP Financial Accounting | =sapscore_-_125 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/weakness
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap erp financial accounting
- version/sap erp financial accounting/100
- version/sap erp financial accounting/101
- version/sap erp financial accounting/102
- version/sap erp financial accounting/103
- version/sap erp financial accounting/104
- version/sap erp financial accounting/105
- version/sap erp financial accounting/602
- version/sap erp financial accounting/603
- version/sap erp financial accounting/604
- version/sap erp financial accounting/605
- version/sap erp financial accounting/606
- version/sap erp financial accounting/616
- version/sap erp financial accounting/618
- version/sap erp financial accounting/700
- version/sap erp financial accounting/720
- version/sap erp financial accounting/730
- version/sap erp financial accounting/s4core
- version/sap erp financial accounting/sap_appl_-_600
- version/sap erp financial accounting/sap_fin_-_617
- version/sap erp financial accounting/sapscore_-_125