Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_s/4hana_(private_cloud_and_on-premise):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap S/4Hana (Private Cloud And On Premise) (33bdd6d1-6e31-55dd-a2fe-4f79a4d7ae8d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27673 vulnerable 2026-06-08 07:53:22.861921 Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise)
MEDIUM (4.9)
Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthorized control over file operations which could leads to no impact on Confidentiality, Low impact on Integrity and Availability of the application.
Published: 2026-04-14T00:06:38.160Z
Updated: 2026-04-14T13:14:19.040Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0498 vulnerable 2026-06-08 07:47:12.402902 Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)
CRITICAL (9.1)
SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
Published: 2026-01-13T01:13:41.371Z
Updated: 2026-02-26T15:04:49.230Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.