SAP ERP 102
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:s\/4hana:102:*:*:*:*:*:*:*
part: a version: 102 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | S/4Hana (1db5d00c-feee-5087-9d8e-f62ea0077696) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0488 |
vulnerable | 2026-06-08 07:47:12.371560 |
Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)
CRITICAL (9.9)
An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute unauthorized critical functionalities, which includes the ability to execute an arbitrary SQL statement. This leads to a full database compromise with high impact on confidentiality, integrity, and availability.
Published: 2026-02-10T03:01:08.999Z
Updated: 2026-02-26T15:04:14.152Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42475 |
vulnerable | 2026-06-08 06:11:08.137611 |
Information Disclosure Vulnerability in Statutory Reporting
MEDIUM (4.3)
The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality.
Published: 2023-10-10T01:37:36.327Z
Updated: 2024-09-28T22:13:00.204Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32248 |
vulnerable | 2026-06-08 05:44:43.080318 |
Details available
Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
Published: 2022-07-12T20:27:22.000Z
Updated: 2024-08-03T07:39:51.053Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31597 |
vulnerable | 2026-06-08 05:43:41.152865 |
Details available
Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.
Published: 2022-07-12T20:27:00.000Z
Updated: 2024-08-03T07:25:59.513Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31589 |
vulnerable | 2026-06-08 05:43:41.118272 |
Details available
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
Published: 2022-06-14T18:36:39.000Z
Updated: 2024-08-03T07:19:06.823Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22531 |
vulnerable | 2026-06-08 05:40:54.141173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22530 |
vulnerable | 2026-06-08 05:40:54.137994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6316 |
vulnerable | 2026-06-08 05:26:45.118952 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6212 |
vulnerable | 2026-06-08 05:26:44.758744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.