SAP S/4HANA
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:s\/4hana:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | S/4Hana (1db5d00c-feee-5087-9d8e-f62ea0077696) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-34264 |
not_vulnerable | 2026-06-08 07:59:11.976737 |
Information Disclosure vulnerability in SAP Human Capital Management for SAP S/4HANA
MEDIUM (6.5)
During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns specific messages. Due to this, an authenticated user with low privileges could guess and enumerate the content shown, beyond their authorized scope. This leads to disclosure of sensitive information causing a high impact on confidentiality, while integrity and availability are unaffected.
Published: 2026-04-14T00:09:12.272Z
Updated: 2026-04-14T13:14:17.154Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27679 |
not_vulnerable | 2026-06-08 07:53:22.870304 |
Missing Authorization check in SAP S/4HANA Frontend OData Service (Manage Reference Structures)
MEDIUM (6.5)
Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.
Published: 2026-04-14T00:07:44.698Z
Updated: 2026-04-14T13:14:18.168Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37172 |
not_vulnerable | 2026-06-08 06:39:46.757967 |
[CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)
MEDIUM (5.4)
SAP S/4HANA Finance (Advanced Payment
Management) does not perform necessary authorization check for an authenticated
user, resulting in escalation of privileges. As a result, it has a low impact
to confidentiality and availability but there is no impact on the integrity.
Published: 2024-07-09T04:15:22.833Z
Updated: 2024-08-02T03:50:54.731Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.