What’s Vulnerable › Vulnerabilities

CVE-2020-6311

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-09 · updated 2026-06-17
• Weakness: CWE-285

Description

Banking services from SAP 9.0 (Bank Analyzer), version - 500, and SAP S/4HANA for financial products subledger, version � 100, does not correctly perform necessary authorization checks for an authenticated user due to Improper Authorization checks, that may cause a system administrator to create incorrect authorization proposals. This may result in privilege escalation and may expose restricted banking data.

Affected products

• SAP Bank Analyzer: 500
• SAP S/4Hana For Financial Products Subledger: 100

References

• https://launchpad.support.sap.com/#/notes/2951325
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700
• https://launchpad.support.sap.com/#/notes/2951325
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700

Get alerted when CVE-2020-6311 or the next vulnerability affects your stack