Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_s/4hana_(finance_for_advanced_payment_management):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap S/4Hana (Finance For Advanced Payment Management) (8aace3d7-5904-550a-937b-88be4562cf48)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-76961 vulnerable 2026-09-16 04:32:47.868614 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
LOW (3.5)
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be triggered on the web server on their behalf. This results in a low impact on confidentiality and integrity. There is no impact on availability.
Published: 2026-09-08T00:12:01.156Z
Updated: 2026-09-09T13:14:25.266Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76959 vulnerable 2026-09-16 04:32:47.833431 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
MEDIUM (4.6)
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be triggered on the web server on their behalf. This results in a low impact on confidentiality and integrity. There is no impact on availability.
Published: 2026-09-08T00:11:41.147Z
Updated: 2026-09-08T10:34:58.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76960 vulnerable 2026-09-16 04:32:47.825634 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)
LOW (3.5)
SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be triggered on the web server on their behalf. This results in a low impact on confidentiality and integrity. There is no impact on availability.
Published: 2026-09-08T00:11:51.253Z
Updated: 2026-09-08T10:34:58.817Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.