Sap S4hana (Sap Se) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2026-06-09. Vendor: Sap Se.

CVEs of Sap S4hana

• CVE-2026-44744 - CVSS 6.5 (medium), 2026-06-09: SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated…
• CVE-2022-32248 - CVSS 5.3 (medium), 2022-07-12: Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the…
• CVE-2022-31597 - CVSS 5.4 (medium), 2022-07-12: Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not…
• CVE-2022-22530 - CVSS 8.1 (high), 2022-01-14: The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This…
• CVE-2022-22531 - CVSS 8.1 (high), 2022-01-14: The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This…
• CVE-2021-33701 - CVSS 9.1 (critical), 2021-09-15: DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020,…
• CVE-2021-38176 - CVSS 9.9 (critical), 2021-09-14: Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section…