Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-22531

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified.

Published

2022-01-14T20:15:15.880

Last Modified

2024-11-21T06:46:58.133

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

4.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap s\/4hana 100 Yes
Application sap s\/4hana 101 Yes
Application sap s\/4hana 102 Yes
Application sap s\/4hana 103 Yes
Application sap s\/4hana 104 Yes
Application sap s\/4hana 105 Yes
Application sap s\/4hana 106 Yes
References