Login Request a demo
S4
Product
S4core
by Sap · last CVE Feb 10, 2026
13
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 1High 2Medium 10Low 0
Severity
All severities13Critical1High2Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add S4core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-39592
6.5
0%
Jul 9
Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges
Affected: 102; 103
CVE-2026-24323
6.1
0%
Feb 10
Multiple vulnerabilities in BSP Applications of SAP Document Management System
Affected: 102; 103; 104; 105; 106; 107; +1 more
CVE-2026-0505
6.1
0%
Feb 10
Multiple vulnerabilities in BSP Applications of SAP Document Management System
Affected: 102; 103; 104; 105; 106; 107; +1 more
CVE-2023-32112
5.5
0%
May 9
Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617, SAP_APPL 618,…
Affected: 100
CVE-2024-37172
5.4
0%
Jul 9
SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges
Affected: 107; 108
CVE-2023-40625
5.4
0%
Sep 12
S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user
Affected: 102; 103; 104; 105; 106; 107
CVE-2023-29110
5.4
0%
Apr 11
The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags
Affected: 100; 101
CVE-2023-29109
4.6
0%
Apr 11
The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows an Excel…
Affected: 101
CVE-2018-2419
4.6
1%
May 9
SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for…
Affected: 1.01; 1.02
CVE-2026-23688
4.3
0%
Feb 10
Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)
Affected: 102; 103; 104; 105; 106; 107
Showing 10