Approved changes feed: RSS · Atom

cpe:2.3:a:sap:s\/4hana:101:*:*:*:*:*:*:*

part: a version: 101 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductS/4Hana (1db5d00c-feee-5087-9d8e-f62ea0077696)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-32248 vulnerable 2026-06-08 05:44:43.079637 Details available
Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
Published: 2022-07-12T20:27:22.000Z
Updated: 2024-08-03T07:39:51.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31597 vulnerable 2026-06-08 05:43:41.152834 Details available
Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.
Published: 2022-07-12T20:27:00.000Z
Updated: 2024-08-03T07:25:59.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31589 vulnerable 2026-06-08 05:43:41.117576 Details available
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
Published: 2022-06-14T18:36:39.000Z
Updated: 2024-08-03T07:19:06.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22531 vulnerable 2026-06-08 05:40:54.141147 Details available
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified.
Published: 2022-01-14T19:11:28.000Z
Updated: 2024-08-03T03:14:55.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22530 vulnerable 2026-06-08 05:40:54.137392 Details available
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application.
Published: 2022-01-14T19:11:26.000Z
Updated: 2024-08-03T03:14:55.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6316 vulnerable 2026-06-08 05:26:45.118928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6212 vulnerable 2026-06-08 05:26:44.758081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.