Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

sap s 4hana 103 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2023-40306

SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an malicious user to redirect users to a malicious site due to insufficient URL validation. As a result, it may have a slight impact on confidentiality and integrity.
Sap S/4hana 103Sap S/4hana 104Sap S/4hana 105Sap S/4hana 106
5
CVSSv2

CVE-2022-32248

Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap S/4hana 105Sap S/4hana 106
NA

CVE-2023-42475

The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged malicious user to read server files with minimal impact on confidentiality.
Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap S/4hana 105Sap S/4hana 106Sap S/4hana 128
7.5
CVSSv2

CVE-2022-22530

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical inform...
Sap S/4hana 100Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap S/4hana 105Sap S/4hana 106
5.5
CVSSv2

CVE-2022-22531

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or...
Sap S/4hana 100Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap S/4hana 105Sap S/4hana 106
5.5
CVSSv2

CVE-2022-31597

Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of priv...
Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap S/4hana 105Sap S/4hana 106Sap Sapscore 127
5.5
CVSSv2

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing read...
Sap Erp 607Sap S/4hana 100Sap Erp 618Sap Erp 730Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104
4
CVSSv2

CVE-2020-6316

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.
Sap S/4hana 100Sap Erp 618Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap Erp 617Sap Erp 616Sap Erp 606Sap Erp 605Sap Erp 604Sap Erp 603Sap Erp 602Sap Erp 600
4
CVSSv2

CVE-2022-31589

Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
Sap S/4hana 100Sap S/4hana 101Sap S/4hana 102Sap S/4hana 103Sap S/4hana 104Sap Erp Financial Accounting 618Sap Erp Financial Accounting 720Sap S/4hana 105Sap S/4hana 106Sap S/4hana 107Sap S/4hana 108Sap Erp Localization For Cee Countries C-cee 110 600Sap Erp Localization For Cee Countries C-cee 110 602Sap Erp Localization For Cee Countries C-cee 110 603Sap Erp Localization For Cee Countries C-cee 110 604Sap Erp Localization For Cee Countries C-cee 110 700
NA

CVE-2023-41369

The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an malicious user to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the ...
Sap S/4 Hana 102Sap S/4 Hana 103Sap S/4 Hana 104Sap S/4 Hana 105Sap S/4 Hana 101Sap S/4 Hana 106Sap S/4 Hana 107Sap S/4 Hana 100Sap S/4 Hana 108
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-6267XML injectionCVE-2024-37673CVE-2024-6266CVE-2024-30078arbitrary CVE-2024-36886CVE-2024-5346template injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook