CVE-2026-0496

MediumCVSS 6.6/10Last modified Jun 17, 2026

Description

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to upload any file (including script files) without proper file format validation. This has low impact on confidentiality, integrity and availability of the application.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
SAP_SE	SAP Fiori App (Intercompany Balance Reconciliation)	UIAPFI70 500; 600; 700; 800; 900; 901; 902; S4CORE 102; 103; 104; 105; 106; 107; 108

References

Timeline

Published: Jan 13, 2026
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-04974.3SAP Product Designer Web UI of Business Server Pages allows authenticated non-administrative users to access non-sensitive information. This CVE-2026-04987.2SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vulnerability in the function module expose CVE-2026-04996.1SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflect CVE-2026-05008.8Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (WorkStation), an unauthenticated attacker co CVE-2026-05019.9Due to insufficient input validation in SAP S/4HANA Private Cloud and On-Premise (Financials General Ledger), an authenticated user could ex CVE-2026-05025.4Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an atta CVE-2026-05036.4Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP EHS Management), an attacker could extrac CVE-2026-05043.8Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially cra CVE-2026-05056.1The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This co CVE-2026-05068.1Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an R CVE-2026-05078.4Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK, an authenticated attacker with adm CVE-2026-05088.1The SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker with high privileges to insert malicious URL within