Diterjemahkan oleh mesin; mungkin terdapat kesilapan. (Machine-translated; may contain errors.) Baca versi bahasa Inggeris (Read in English)
SAP S/4HANA
43 nota sejak Januari 2023.
Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).
| Hari Tampalan | Nota | Tajuk | Keutamaan (diterbitkan daripada CVSS, bukan keutamaan SAP) | CVSS |
|---|---|---|---|---|
| Oktober 2026 | 3805589 | Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) | Kritikal | 9.9 |
| Oktober 2026 | 3799621 | Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object) | Sederhana | 4.7 |
| September 2026 | 3756450 | SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation) | Sederhana | 6.5 |
| September 2026 | 3365311 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) | Sederhana | 4.6 |
| September 2026 | 3657599 | Missing Authorization check in SAP S/4HANA (Manage Bank Chains app) | Sederhana | 4.3 |
| September 2026 | 3365276 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) | Rendah | 3.5 |
| September 2026 | 3371336 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) | Rendah | 3.5 |
| Ogos 2026 | 3669608 | Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items) | Sederhana | 4.3 |
| Julai 2026 | 3515598 | Missing Authorization check in SAP S/4HANA (Draft operation) | Sederhana | 4.3 |
| Julai 2026 | 3713902 | Missing Authorization check in SAP S/4 HANA (Create Single Payment) | Sederhana | 4.3 |
| Jun 2026 | 3751691 | SQL Injection vulnerability in SAP S/4HANA | Sederhana | 6.5 |
| Mei 2026 | 3724838 | SQL injection vulnerability in SAP S/4HANA (SAP Enterprise Search for ABAP) | Kritikal | 9.6 |
| April 2026 | 3703813 | Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise) | Sederhana | 4.9 |
| Februari 2026 | 3646297 | Information Disclosure vulnerability in S/4HANA (Manage Payment Media) | Sederhana | 4.3 |
| Januari 2026 | 3694242 | Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise) | Kritikal | 9.1 |
| Oktober 2025 | 3625683 | Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statements) | Sederhana | 4.3 |
| September 2025 | 3635475 | Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise) | Tinggi | 8.1 |
| Ogos 2025 | 3627998 | Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise) | Kritikal | 9.9 |
| Ogos 2025 | 3614804 | Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management) | Sederhana | 6.9 |
| Ogos 2025 | 3616863 | CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice) | Sederhana | 4.3 |
| Jun 2025 | 3580384 | Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) | Sederhana | 6.7 |
| Jun 2025 | 3441087 | Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application) | Sederhana | 5.4 |
| Jun 2025 | 3596850 | Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement) | Sederhana | 4.3 |
| Jun 2025 | 3608058 | Missing Authorization check in SAP S/4HANA (Bank Account Application) | Sederhana | 4.3 |
| Mei 2025 | 3596033 | Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise) | Sederhana | 6.4 |
| Mei 2025 | 3227940 | Missing Authorization check in SAP S4/HANA (OData meta-data property) | Sederhana | 4.3 |
| April 2025 | 3581961 | Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise) | Kritikal | 9.9 |
| April 2025 | 3446649 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4 HANA (Learning Solution) | Sederhana | 4.6 |
| Mac 2025 | 3474392 | Missing Authorization check in S/4HANA (Manage Purchasing Info Records) | Sederhana | 4.3 |
| Mac 2025 | 3557131 | Missing Authorization check in SAP S/4HANA (RBD) | Sederhana | 4.3 |
| Mac 2025 | 3565835 | Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements) | Sederhana | 4.3 |
| Oktober 2024 | 3251893 | HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements) | Sederhana | 4.3 |
| September 2024 | 3437585 | Information Disclosure in SAP S/4 HANA (Statutory Reports) | Sederhana | 4.3 |
| Jun 2024 | 3466175 | Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files) | Sederhana | 6.5 |
| Mei 2024 | 3460772 | Cross-Site Scripting (XSS) Vulnerability in SAP S/4HANA (Document Service Handler for DPS) | Sederhana | 6.1 |
| Mei 2024 | 3434666 | Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules) | Sederhana | 4.3 |
| April 2024 | 3427178 | Missing Authorization check in SAP S/4 HANA (Cash Management) | Sederhana | 4.3 |
| April 2024 | 3430173 | Missing Authorization check in SAP S/4 HANA (Cash Management) | Sederhana | 4.3 |
| Oktober 2023 | 3219846 | Missing Authorization Check In S/4HANA (Manage Withholding Tax Items) | Sederhana | 5.4 |
| September 2023 | 3369680 | External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application) | Rendah | 3.5 |
| Ogos 2023 | 3156972 | URL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search) | Sederhana | 6.1 |
| Julai 2023 | 3341211 | Improper Access Control in SAP S/4HANA (Manage Journal Entry Template) | Sederhana | 6.3 |
| Februari 2023 | 2985905 | SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. | Sederhana | 6.5 |