← Voltar para CVEs

CVE-2022-22531

HIGH

8.1

Descricao

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified.

Detalhes CVE

Pontuacao CVSS v3.18.1

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado1/14/2022

Ultima modificacao2/24/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

sap:s\/4hana

Referencias

https://launchpad.support.sap.com/#/notes/3112928(cna@sap.com)

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035(cna@sap.com)

https://launchpad.support.sap.com/#/notes/3112928(af854a3a-2127-422b-91ae-364da2661108)

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.