Sap Se S 4Hana vulnerabilities

CVE-2026-24314 [MEDIUM] CWE-497 CVE-2026-24314: Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to acce Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.

CVE-2025-26656 [MEDIUM] CWE-862 CVE-2025-26656: OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on integrity of the application.

CVE-2023-42473 [MEDIUM] CWE-862 CVE-2023-42473: S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization check S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges which has low impact on the confidentiality and integrity of the application.