Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_s/4hana_(manage_bank_statements):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap S/4Hana (Manage Bank Statements) (ae3e6174-2a6d-50df-8475-39aa563af2fc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27436 vulnerable 2026-06-08 07:14:54.932458 Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)
MEDIUM (4.3)
The Manage Bank Statements in SAP S/4HANA does not perform required access control checks for an authenticated user to confirm whether a request to interact with a resource is legitimate, allowing the attacker to delete the attachment of a posted bank statement. This leads to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.
Published: 2025-03-11T00:39:14.372Z
Updated: 2025-03-11T02:03:20.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27433 vulnerable 2026-06-08 07:14:54.929538 Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)
MEDIUM (4.3)
The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reversed bank statement. This vulnerability has a low impact on the application's integrity, with no effect on confidentiality and availability of the application.
Published: 2025-03-11T00:38:50.716Z
Updated: 2025-03-11T02:04:54.876Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.