← Zuruck zu CVEs

CVE-2022-22531

HIGH

8.1

Beschreibung

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified.

CVE Details

CVSS v3.1 Bewertung8.1

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht1/14/2022

Zuletzt geandert2/24/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

sap:s\/4hana

Referenzen

https://launchpad.support.sap.com/#/notes/3112928(cna@sap.com)

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035(cna@sap.com)

https://launchpad.support.sap.com/#/notes/3112928(af854a3a-2127-422b-91ae-364da2661108)

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.