Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sap s4core 103 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-40625
S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user. This could allow an malicious user to perform unintended actions resulting in escalation of privileges which has low impact o...
Sap S4core 102Sap S4core 103Sap S4core 104Sap S4core 105Sap S4core 106Sap S4core 107
6.5
CVSSv2
CVE-2021-33701
DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020, SAPSCORE 125, S4CORE 102, 102, 103, 104, 105, allows an attacker with access to highly privileged account to execute manipulated...
Sap Dmis 710Sap Dmis 2011 1 620Sap Dmis 2011 1 640Sap Dmis 2011 1 700Sap Dmis 2011 1 710Sap Dmis 2011 1 730Sap Dmis 2011 1 731Sap Dmis 2011 1 752Sap Dmis 2020125Sap S4core 102Sap S4core 103Sap S4core 104Sap S4core 105Sap Sapscore 125
5.5
CVSSv2
CVE-2020-6268
Statutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) does not execute the required authorization checks for an authenticated user, allowing an malicious user to view and t...
Sap Erp \\(ea-finserv\\) 600Sap Erp \\(ea-finserv\\) 603Sap Erp \\(ea-finserv\\) 604Sap Erp \\(ea-finserv\\) 605Sap Erp \\(ea-finserv\\) 606Sap Erp \\(ea-finserv\\) 616Sap Erp \\(ea-finserv\\) 617Sap Erp \\(ea-finserv\\) 618Sap Erp \\(ea-finserv\\) 800Sap Erp \\(s4core\\) 101Sap Erp \\(s4core\\) 102Sap Erp \\(s4core\\) 103Sap Erp \\(s4core\\) 104
6.5
CVSSv2
CVE-2020-6249
The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an malicious user to execute crafted database queries, exposing the backend database, leading to SQL Injection.
Sap Master Data Governance \\(s4core\\) 101Sap Master Data Governance \\(s4fnd\\) 102Sap Master Data Governance \\(s4fnd\\) 103Sap Master Data Governance \\(s4fnd\\) 104Sap Master Data Governance \\(sap Bs Fnd\\) 748
4
CVSSv2
CVE-2020-6204
The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) returns more records than it should be when selecting and displaying the contract number, lead...
Sap Treasury And Risk Management \\(ea-finserv\\) 600Sap Treasury And Risk Management \\(ea-finserv\\) 603Sap Treasury And Risk Management \\(ea-finserv\\) 604Sap Treasury And Risk Management \\(ea-finserv\\) 605Sap Treasury And Risk Management \\(ea-finserv\\) 606Sap Treasury And Risk Management \\(ea-finserv\\) 616Sap Treasury And Risk Management \\(ea-finserv\\) 617Sap Treasury And Risk Management \\(ea-finserv\\) 618Sap Treasury And Risk Management \\(ea-finserv\\) 800Sap Treasury And Risk Management \\(s4core\\) 101Sap Treasury And Risk Management \\(s4core\\) 102Sap Treasury And Risk Management \\(s4core\\) 103Sap Treasury And Risk Management \\(s4core\\) 104
5.5
CVSSv2
CVE-2022-31597
Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of priv...
Sap S\\/4hana 101Sap S\\/4hana 102Sap S\\/4hana 103Sap S\\/4hana 104Sap S\\/4hana 105Sap S\\/4hana 106Sap Sapscore 127
5.5
CVSSv2
CVE-2021-38164
SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105, allows a registered malicious user to invoke certain functions that would otherwise be...
Sap Erp Financial Accounting 100Sap Erp Financial Accounting 101Sap Erp Financial Accounting 102Sap Erp Financial Accounting 103Sap Erp Financial Accounting 104Sap Erp Financial Accounting 105Sap Erp Financial Accounting 602Sap Erp Financial Accounting 603Sap Erp Financial Accounting 604Sap Erp Financial Accounting 605Sap Erp Financial Accounting 606Sap Erp Financial Accounting 616Sap Erp Financial Accounting 618Sap Erp Financial Accounting 700Sap Erp Financial Accounting 720Sap Erp Financial Accounting 730Sap Erp Financial Accounting S4coreSap Erp Financial Accounting Sap Appl - 600Sap Erp Financial Accounting Sap Fin - 617Sap Erp Financial Accounting Sapscore - 125
NA
CVE-2024-21735
SAP LT Replication Server - version S4CORE 103, S4CORE 104, S4CORE 105, S4CORE 106, S4CORE 107, S4CORE 108, does not perform necessary authorization checks. This could allow an attacker with high privileges to perform unintended actions, resulting in escalation of privileges, whi...
Sap Lt Replication Server S4core 104Sap Lt Replication Server S4core 105Sap Lt Replication Server S4core 106Sap Lt Replication Server S4core 107Sap Lt Replication Server S4core 108Sap Lt Replication Server S4core 103
4
CVSSv2
CVE-2019-0399
SAP Portfolio and Project Management, prior to S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure.
Sap Portfolio And Project Management Cprxrpm 500 702Sap Portfolio And Project Management Cprxrpm 600 740Sap Portfolio And Project Management Cprxrpm 610 740Sap Portfolio And Project Management Eppm 100Sap Portfolio And Project Management S4core 102Sap Portfolio And Project Management S4core 103
5.5
CVSSv2
CVE-2020-6199
The view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO version 607, SAP_FIN versions- 618, 730 and SAP S/4HANA (MENA Certificate Management), S4CORE versions- 100, 101, 102, 103, 104; does not have any authorization check to it due to which an attacker withou...
Sap Erp 607
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook