S 4Hana
CVE-2022-32248
MEDIUM
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Lifecycle Timeline
1DescriptionNVD
Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
AnalysisAI
Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-20. Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data. Affected products include: Sap S\/4Hana. Version information: version 101.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT functi
SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction
SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a maliciou
Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS ver
S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization checks for an authenticat
Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extens
Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (version
Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS vers
SAP S/4HANA (Financial Products Subledger), version 100, uses an incorrect authorization object in some reports. Rated m
The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker
SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today