CVEvulnerability

CVE-2022-22530

8.1 HIGH Published 2022-01-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-01-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:S/C:N/I:P/A:C

Description

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application.

Affected configurations

• sap s\/4hana 100 • sap s\/4hana 101 • sap s\/4hana 102 • sap s\/4hana 103 • sap s\/4hana 104 • sap s\/4hana 105 • sap s\/4hana 106

References