Sap S/4Hana
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_s/4hana:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap S/4Hana (ab63a176-5aa0-529a-8862-d96b5471cd47) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44744 |
vulnerable | 2026-07-29 00:52:14.609300 |
SQL Injection vulnerability in SAP S/4HANA
MEDIUM (6.5)
SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access to. The vulnerability has a high impact on the confidentiality of the data with no impact on the integrity and availability of the application.
Published: 2026-06-09T00:20:37.871Z
Updated: 2026-06-09T13:21:32.555Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32248 |
vulnerable | 2026-06-08 05:44:43.078917 |
Details available
Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
Published: 2022-07-12T20:27:22.000Z
Updated: 2024-08-03T07:39:51.053Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31597 |
vulnerable | 2026-06-08 05:43:41.152594 |
Details available
Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.
Published: 2022-07-12T20:27:00.000Z
Updated: 2024-08-03T07:25:59.513Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22531 |
vulnerable | 2026-06-08 05:40:54.141073 |
Details available
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified.
Published: 2022-01-14T19:11:28.000Z
Updated: 2024-08-03T03:14:55.412Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22530 |
vulnerable | 2026-06-08 05:40:54.135309 |
Details available
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application.
Published: 2022-01-14T19:11:26.000Z
Updated: 2024-08-03T03:14:55.426Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38176 |
vulnerable | 2026-06-08 05:32:55.613969 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33701 |
vulnerable | 2026-06-08 05:32:12.177364 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.