SAP S/4Hana vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Latest SAP S/4Hana vulnerabilities

CVE-2026-0488 — Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor) (CVSS 9.9)
CVE-2024-4138 — Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules) (CVSS 4.3)
CVE-2023-42475 — Information Disclosure Vulnerability in Statutory Reporting (CVSS 4.3)
CVE-2023-42473 — Missing Authorization Check In S/4HANA (Manage Withholding Tax Items) (CVSS 5.4)
CVE-2023-40306 — URL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search) (CVSS 6.1)
CVE-2023-24524 — (CVSS 6.5)
CVE-2022-32248 — (CVSS 5.3)
CVE-2022-31597 — (CVSS 5.4)
CVE-2022-31589 — (CVSS 6.5)
CVE-2022-22542 — (CVSS 6.5)
CVE-2022-22531 — (CVSS 8.1)
CVE-2022-22530 — (CVSS 8.1)
CVE-2021-38176 — (CVSS 8.8)
CVE-2020-6316 — (CVSS 4.3)
CVE-2020-6212 — (CVSS 5.4)
CVE-2020-6214 — (CVSS 4.7)
CVE-2020-6185 — (CVSS 5.4)
CVE-2020-6184 — (CVSS 6.1)