S4core (Sap) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2026-02-10. Vendor: Sap.
CVEs of S4core
- CVE-2026-24323 - CVSS 6.1 (medium), 2026-02-10: The BSP applications allow an unauthenticated user to inject malicious script content via user-controlled URL parameters that are not sufficiently sanitized.…
- CVE-2026-23688 - CVSS 4.3 (medium), 2026-02-10: SAP Fiori App Manage Service Entry Sheets does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.…
- CVE-2026-0505 - CVSS 6.1 (medium), 2026-02-10: The BSP applications allow an unauthenticated user to manipulate user-controlled URL parameters that are not sufficiently validated. This could result in…
- CVE-2024-37172 - CVSS 5.4 (medium), 2024-07-09: SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in escalation of…
- CVE-2024-39592 - CVSS 7.7 (high), 2024-07-09: Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This allows an attacker to…
- CVE-2023-40625 - CVSS 5.4 (medium), 2023-09-12: S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user.…
- CVE-2023-35870 - CVSS 7.3 (high), 2023-07-11: When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 107, an attacker could intercept the…
- CVE-2023-32112 - CVSS 5.5 (medium), 2023-05-09: Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL…
- CVE-2023-29110 - CVSS 5.4 (medium), 2023-04-11: The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows…
- CVE-2023-29109 - CVSS 4.6 (medium), 2023-04-11: The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application…
- CVE-2021-33701 - CVSS 9.1 (critical), 2021-09-15: DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020,…
- CVE-2018-2484 - CVSS 8.8 (high), 2019-01-08: SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16,…
- CVE-2018-2419 - CVSS 4.6 (medium), 2018-05-09: SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary…
