The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/3112928 | Permissions Required |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
10 Jul 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application. |
21 Jan 2022, 21:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035 - Vendor Advisory | |
| References | (MISC) https://launchpad.support.sap.com/#/notes/3112928 - Permissions Required | |
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 8.1 |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:sap:s\/4hana:103:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:105:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:106:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:101:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:100:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:102:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:104:*:*:*:*:*:*:* |
14 Jan 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-14 20:15
Updated : 2024-02-04 22:08
NVD link : CVE-2022-22530
Mitre link : CVE-2022-22530
CVE.ORG link : CVE-2022-22530
JSON object : View
Products Affected
sap
- s\/4hana
CWE