Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/3216161 | Permissions Required Vendor Advisory |
| https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Jul 2022, 18:05
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.3 |
| CPE | cpe:2.3:a:sap:s\/4hana:102:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:104:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:106:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:103:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:101:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:105:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory | |
| References | (MISC) https://launchpad.support.sap.com/#/notes/3216161 - Permissions Required, Vendor Advisory |
12 Jul 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-12 21:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-32248
Mitre link : CVE-2022-32248
CVE.ORG link : CVE-2022-32248
JSON object : View
Products Affected
sap
- s\/4hana
CWE
CWE-20
Improper Input Validation