What’s Vulnerable › Vulnerabilities

CVE-2022-22530

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-14 · updated 2026-06-17

Description

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application.

Affected products

• SAP S/4Hana: 100, 101, 102, 103, 104, 105 (+1)

References

• https://launchpad.support.sap.com/#/notes/3112928
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035
• https://launchpad.support.sap.com/#/notes/3112928
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035

Get alerted when CVE-2022-22530 or the next vulnerability affects your stack