SAP Fiori
10 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| June 2026 | 3682699 | Path Traversal Vulnerability in SAP Fiori (launchpad) | Medium | 4.2 |
| February 2026 | 3215823 | Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services) | Medium | 4.3 |
| January 2026 | 3565506 | Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation) | High | 8.1 |
| January 2026 | 3122486 | Missing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation) | Medium | 4.3 |
| January 2026 | 3655227 | Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation) | Medium | 4.3 |
| January 2026 | 3655229 | Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation) | Medium | 4.3 |
| September 2025 | 3450692 | Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups) | Medium | 4.3 |
| August 2025 | 3624943 | Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad) | Low | 3.5 |
| March 2025 | 3557655 | Broken Access Control in SAP Fiori apps (Posting Library) | Medium | 4.3 |
| February 2024 | 3237638 | Missing authorization check in SAP Fiori app (My Overtime Requests) | Medium | 4.3 |