CVE-2026-0494
Information Disclosure in SAP Fiori Intercompany Balance Reconciliation
Publication date: 2026-01-13
Last updated on: 2026-01-13
Assigner: SAP SE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| sap | fiori_app_intercompany_balance_reconciliation | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-497 | The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the SAP Fiori App Intercompany Balance Reconciliation application allows an attacker, under certain conditions, to access information that should otherwise be restricted. It primarily impacts the confidentiality of the application with a low severity, and does not affect the integrity or availability of the application.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to restricted information within the SAP Fiori App Intercompany Balance Reconciliation application. Although the impact on confidentiality is low, it could potentially expose sensitive data. There is no impact on the integrity or availability of the application.