CVE-2026-0494CWE-497

Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)

Medium · published January 13, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and availability are not impacted.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.6th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-01-13T01:13Z
EPSS history
Timeline
  • 13 JAN 01:13Z
    Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)
    cvelistv5