5.5

CVE-2023-32112: sap_se vendor master hierarchy Missing Authorization

CVSS: 5.5v3.1MediumModified
Published 09-05-2023Last modified 28-01-2025
Open JSON

Vulnerability summary

CVE-2023-32112 is a medium (CVSS 5.5) Missing Authorization vulnerability in sap_se vendor master hierarchy. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.7% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.15%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 09-05-2023
    PublishedVulnerability first disclosed.
  2. 28-01-2025
    Last modifiedVulnerability information updated.

Description

Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617, SAP_APPL 618, S4CORE 100, does not perform necessary authorization checks for an authenticated user to access some of its function. This could lead to modification of data impacting the integrity of the system.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.15%

Chance of exploitation in the next 30 days

Percentile

4%

Versus all other CVEs

30-day change

0.00 pp

From 0.15% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Sap2 products
  • s4core100
  • vendor_master_hierarchysap_appl_500 | sap_appl_600 | sap_appl_602 | sap_appl_603 | sap_appl_604 | sap_appl_605 | sap_appl_606 | sap_appl_616 | sap_appl_617 | sap_appl_618
Sap_se1 product
  • vendor master hierarchySAP_APPL 500 | SAP_APPL 600 | SAP_APPL 602 | SAP_APPL 603 | SAP_APPL 604 | SAP_APPL 605 | SAP_APPL 606 | SAP_APPL 616 | SAP_APPL 617 | SAP_APPL 618 | S4CORE 100

2 vendors · 3 products

References

2 links