S4
Product
S/4hana
17
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 13Low 0
Watch
Add S/4hana to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0488 | 9.9 | Feb 10 | Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) Affected: 102; 103; 104; 105; 106; 107; +2 more |
| CVE-2021-38176 | 8.8 | Sep 14 | Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute… Affected: 1511; 1610; 1709; 1809; 1909; 2020; +1 more |
| CVE-2022-22531 | 8.1 | Jan 14 | The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files Affected: 100; 101; 102; 103; 104; 105; +1 more |
| CVE-2022-22530 | 8.1 | Jan 14 | The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files Affected: 100; 101; 102; 103; 104; 105; +1 more |
| CVE-2023-24524 | 6.5 | Feb 14 | SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges Affected: 104; 105 |
| CVE-2022-31589 | 6.5 | Jun 14 | Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform… Affected: 100; 101; 102; 103; 104; 105; +3 more |
| CVE-2022-22542 | 6.5 | Feb 9 | S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and… Affected: 104; 105; 106 |
| CVE-2023-40306 | 6.1 | Sep 8 | SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validation Affected: 103; 104; 105; 106 |
| CVE-2020-6184 | 6.1 | Feb 12 | Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), does not sufficiently… Affected: 7.50; 7.51; 7.52; 7.53; 7.54 |
| CVE-2023-42473 | 5.4 | Oct 10 | S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges which has… Affected: 106 |
| CVE-2022-31597 | 5.4 | Jul 12 | Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary… Affected: 101; 102; 103; 104; 105; 106 |
| CVE-2020-6212 | 5.4 | Apr 24 | Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101,… Affected: 100; 101; 102; 103; 104 |
| CVE-2020-6185 | 5.4 | Feb 12 | Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), allows an authenticated… Affected: 7.50; 7.51; 7.52; 7.53; 7.54 |
| CVE-2022-32248 | 5.3 | Jul 12 | Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing… Affected: 101; 102; 103; 104; 105; 106 |
| CVE-2020-6214 | 4.7 | Apr 14 | SAP S/4HANA (Financial Products Subledger), version 100, uses an incorrect authorization object in some reports Affected: 100 |
| CVE-2023-42475 | 4.3 | Oct 10 | The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on… Affected: 102; 103; 104; 105; 106; 128 |
| CVE-2020-6316 | 4.3 | Nov 10 | SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check Affected: 100; 101; 102; 103; 104 |
Showing 17