SAP Note 3565506

Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)

HighCVSS 8.1SAP Fiori

Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).

CVE(s): CVE-2026-0495 CVE-2026-0496 CVE-2026-0511
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected products and versions

Product SAP Fiori App (Intercompany Balance Reconciliation)
Versions: UIAPFI70 500, 600, 700, 800, 900, 901, 902, S4CORE 102, 103, 104, 105, 106, 107, 108

Appears in

Patch Days listing this note, newest first.

January 2026HighCVSS 8.1

SAP note on SAP for Me (SAP login required)