5.4
CVSSv3

CVE-2021-38164

Published: 14/09/2021 Updated: 24/09/2021
CVSS v2 Base Score: 5.5 | Impact Score: 4.9 | Exploitability Score: 8
CVSS v3 Base Score: 5.4 | Impact Score: 2.5 | Exploitability Score: 2.8
VMScore: 490
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N

Vulnerability Summary

SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105, allows a registered malicious user to invoke certain functions that would otherwise be restricted to specific users. These functions are normally exposed over the network and once exploited the attacker may be able to view and modify financial accounting data that only a specific user should have access to.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sap erp financial accounting 100

sap erp financial accounting 101

sap erp financial accounting 102

sap erp financial accounting 103

sap erp financial accounting 104

sap erp financial accounting 105

sap erp financial accounting 602

sap erp financial accounting 603

sap erp financial accounting 604

sap erp financial accounting 605

sap erp financial accounting 606

sap erp financial accounting 616

sap erp financial accounting 618

sap erp financial accounting 700

sap erp financial accounting 720

sap erp financial accounting 730

sap erp financial accounting s4core

sap erp financial accounting sap_appl_-_600

sap erp financial accounting sap_fin_-_617

sap erp financial accounting sapscore_-_125