CVEvulnerability

CVE-2026-24314

4.3 MEDIUM Published 2026-02-24 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-02-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-497

Description

Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.

Affected configurations

• sap s\/4hana uiapfi70 600 • sap s\/4hana uiapfi70 700 • sap s\/4hana uiapfi70 800 • sap s\/4hana uiapfi70 900 • sap s\/4hana uiapfi70 901 • sap s\/4hana uiapfi70 902 • sap s\/4hana uis4h 109

Related

Weakness · CWE (1)

  • CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere weakness

References