Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-22530

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application.

Published

2022-01-14T20:15:15.837

Last Modified

2024-11-21T06:46:58.020

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:P/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: COMPLETE
Exploitability Score

8.0

Impact Score

7.8

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap s\/4hana 100 Yes
Application sap s\/4hana 101 Yes
Application sap s\/4hana 102 Yes
Application sap s\/4hana 103 Yes
Application sap s\/4hana 104 Yes
Application sap s\/4hana 105 Yes
Application sap s\/4hana 106 Yes
References