CVE-2026-0494

{"id": "CVE-2026-0494", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2026-01-13T02:15:51.667", "references": [{"url": "https://me.sap.com/notes/3655227", "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "source": "cna@sap.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-497"}]}], "descriptions": [{"lang": "en", "value": "Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and availability are not impacted."}, {"lang": "es", "value": "Bajo ciertas condiciones, la aplicaci\u00f3n SAP Fiori Intercompany Balance Reconciliation permite a un atacante acceder a informaci\u00f3n que de otro modo estar\u00eda restringida. Esto tiene un bajo impacto en la confidencialidad de la aplicaci\u00f3n; la integridad y la disponibilidad no se ven afectadas."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "cna@sap.com"}