SAP SE SAP S/4HANA
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-32248 | 101 ; 102 ; 103 ; … | Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could | MEDIUM 5.3 | 0.7 % | ||
| CVE-2022-31597 | S4CORE 101 ; 102 ; 103 ; … | Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovak | MEDIUM 5.4 | 0.4 % | ||
| CVE-2022-22531 | 100 ; 101 ; 102 ; … | The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or download | HIGH 8.1 | 0.8 % | ||
| CVE-2022-22530 | 100 ; 101 ; 102 ; … | The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or download | HIGH 8.1 | 0.9 % | ||
| CVE-2021-33701 | < SAPSCORE 125 ; < S4CORE 102 ; < 102 ; … | DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1 | CRITICAL 9.1 | 2.1 % | ||
| CVE-2021-38176 | < 1511 ; < 1610 ; < 1709 ; … | Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in | CRITICAL 9.9 | 1.3 % |