SAP S4Core vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Latest SAP S4Core vulnerabilities

CVE-2026-24323 — Multiple vulnerabilities in BSP Applications of SAP Document Management System (CVSS 6.1)
CVE-2026-23688 — Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services) (CVSS 4.3)
CVE-2026-0505 — Multiple vulnerabilities in BSP Applications of SAP Document Management System (CVSS 6.1)
CVE-2024-37172 — [CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management) (CVSS 5.4)
CVE-2024-39592 — [CVE-2024-39592] Missing Authorization check in SAP PDCE (CVSS 6.5)
CVE-2023-40625 — Missing Authorization check in SAP Manage Purchase Contracts App (CVSS 5.4)
CVE-2023-35870 — Improper Access Control in SAP S/4HANA (Manage Journal Entry Template) (CVSS 7.3)
CVE-2023-32112 — Missing Authorization Check in Vendor Master Hierarchy (CVSS 5.5)
CVE-2023-29110 — Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard) (CVSS 5.4)
CVE-2023-29109 — Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard) (CVSS 4.6)
CVE-2021-33701 — (CVSS 9.1)
CVE-2018-2484 — (CVSS 8.8)
CVE-2018-2419 — (CVSS 4.6)