S4
Product
S4core
13
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 10Low 0
Watch
Add S4core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-33701 | 9.1 | Sep 15 | DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020, SAPSCORE 125, S4CORE 102,… Affected: 102; 103; 104; 105 |
| CVE-2018-2484 | 8.8 | Jan 8 | SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0;… Affected: 1.01; 1.02; 1.03 |
| CVE-2023-35870 | 7.3 | Jul 11 | When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 107, an attacker could intercept the save request and change… Affected: 104; 105; 106; 107 |
| CVE-2024-39592 | 6.5 | Jul 9 | Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges Affected: 102; 103 |
| CVE-2026-24323 | 6.1 | Feb 10 | Multiple vulnerabilities in BSP Applications of SAP Document Management System Affected: 102; 103; 104; 105; 106; 107; +1 more |
| CVE-2026-0505 | 6.1 | Feb 10 | Multiple vulnerabilities in BSP Applications of SAP Document Management System Affected: 102; 103; 104; 105; 106; 107; +1 more |
| CVE-2023-32112 | 5.5 | May 9 | Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617, SAP_APPL 618,… Affected: 100 |
| CVE-2024-37172 | 5.4 | Jul 9 | SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges Affected: 107; 108 |
| CVE-2023-40625 | 5.4 | Sep 12 | S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user Affected: 102; 103; 104; 105; 106; 107 |
| CVE-2023-29110 | 5.4 | Apr 11 | The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags Affected: 100; 101 |
| CVE-2023-29109 | 4.6 | Apr 11 | The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows an Excel… Affected: 101 |
| CVE-2018-2419 | 4.6 | May 9 | SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for… Affected: 1.01; 1.02 |
| CVE-2026-23688 | 4.3 | Feb 10 | Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services) Affected: 102; 103; 104; 105; 106; 107 |
Showing 13