CVE-2026-24314

Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - cna@sap.com

Published

2026-02-24

Last modified

2026-02-24

Weaknesses

CWE-497

Affected products

• S/4hana Uiapfi70 (Sap)
• S/4hana Uis4h (Sap)
• S4hana Manage Payment Media (Sap Se)

References

• https://me.sap.com/notes/3646297
• https://url.sap/sapsecuritypatchday