Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

sap s 4hana 101 vulnerabilities and exploits

(subscribe to this query)
445
VMScore

CVE-2022-32248

Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap S/4hana 105Sap S/4hana 106
668
VMScore

CVE-2022-22530

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical inform...
Sap S/4hana 100Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap S/4hana 105Sap S/4hana 106
490
VMScore

CVE-2022-22531

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or...
Sap S/4hana 100Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap S/4hana 105Sap S/4hana 106
490
VMScore

CVE-2022-31597

Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of priv...
Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap S/4hana 105Sap S/4hana 106Sap Sapscore 127
490
VMScore

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing read...
Sap Erp 607Sap S/4hana 100Sap Erp 618Sap Erp 730Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104
356
VMScore

CVE-2020-6316

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.
Sap S/4hana 100Sap Erp 618Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap Erp 617Sap Erp 616Sap Erp 606Sap Erp 605Sap Erp 604Sap Erp 603Sap Erp 602Sap Erp 600
356
VMScore

CVE-2022-31589

Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
Sap S/4hana 100Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap Erp Financial Accounting 618Sap Erp Financial Accounting 720Sap S/4hana 105Sap S/4hana 106Sap S/4hana 107Sap S/4hana 108Sap Erp Localization For Cee Countries C-cee 110 600Sap Erp Localization For Cee Countries C-cee 110 602Sap Erp Localization For Cee Countries C-cee 110 603Sap Erp Localization For Cee Countries C-cee 110 604Sap Erp Localization For Cee Countries C-cee 110 700
NA

CVE-2023-41369

The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an malicious user to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the ...
Sap S/4 Hana 102Sap S/4 Hana 103Sap S/4 Hana 104Sap S/4 Hana 105Sap S/4 Hana 101Sap S/4 Hana 106Sap S/4 Hana 107Sap S/4 Hana 100Sap S/4 Hana 108
490
VMScore

CVE-2020-6199

The view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO version 607, SAP_FIN versions- 618, 730 and SAP S/4HANA (MENA Certificate Management), S4CORE versions- 100, 101, 102, 103, 104; does not have any authorization check to it due to which an attacker withou...
Sap Erp 607
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-28995CVE-2024-36680CVE-2024-35537unauthorizedCVE-2024-21518CVE-2024-37673cross-site scriptingSSRFCVE-2024-6241
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook