SAP Fiori App (Intercompany Balance Reconciliation) provides an information disclosure flaw that lets a compromised user read data that should have been restricted. The impact is primarily a modest loss of confidentiality; the flaw does not alter the system’s integrity or availability and is classified as low severity with a CVSS score of 4.3.

The vulnerability affects the SAP Fiori App (Intercompany Balance Reconciliation) component of SAP, with no specific version information listed. Users running this application should verify whether the installed build is susceptible.

With an EPSS score below 1% and no listing in the CISA KEV catalog, the likelihood of immediate exploitation is low. The attack vector is inferred to arise from within the application layer, potentially by users who gain access to the Fiori app under certain conditions. Because the flaw does not grant elevated privileges or disrupt services, it is less attractive for large‑scale attacks but could still compromise sensitive data if exploited.