Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_s/4_hana_(manage_bank_statement_reprocessing_rules):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap S/4 Hana (Manage Bank Statement Reprocessing Rules) (e40b6228-e70c-5b0d-81fd-cddfd292bee1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4139 vulnerable 2026-06-08 06:50:17.093651 Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)
MEDIUM (4.3)
Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can delete rules of other users affecting the integrity of the application. Confidentiality and Availability are not affected.
Published: 2024-05-14T03:51:31.364Z
Updated: 2024-08-01T20:33:52.507Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4138 vulnerable 2026-06-08 06:50:17.093112 Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)
MEDIUM (4.3)
Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can enable/disable the sharing rule of other users affecting the integrity of the application. Confidentiality and Availability are not affected.
Published: 2024-05-14T03:53:10.737Z
Updated: 2024-08-01T20:33:52.538Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.