SAP SE SAP S/4Hana Finance (Advanced Payment Management) vulnerabilities

2 vulnerabilities

Known vulnerabilities in SAP SE SAP S/4Hana Finance (Advanced Payment Management), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2024-21736sap_sesap s/4hana finance (advanced payment management)+1
EPSS score
0.27%
SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application.5.4CVE-2024-37172sap_sesap s/4hana finance (advanced payment management)+1
EPSS score
0.30%
SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality and availability but there is no impact on the integrity.