What’s Vulnerable › Vulnerabilities

CVE-2022-22531

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-14 · updated 2026-06-17

Description

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified.

Affected products

• SAP S/4Hana: 100, 101, 102, 103, 104, 105 (+1)

References

• https://launchpad.support.sap.com/#/notes/3112928
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035
• https://launchpad.support.sap.com/#/notes/3112928
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035

Get alerted when CVE-2022-22531 or the next vulnerability affects your stack