SAP SE SAP S/4Hana Core vulnerabilities

2 vulnerabilities

Known vulnerabilities in SAP SE SAP S/4Hana Core, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2022-31589sap sesap erp, localization for cee countries.+5
EPSS score
0.67%
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.4.3CVE-2023-42475sap_sesap s/4hana core+1
EPSS score
0.45%
The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality.