Sap Se Sap S 4Hana vulnerabilities

CVE-2025-42957 [CRITICAL] CWE-94 CVE-2025-42957: SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function modul SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the

CVE-2025-27429 [CRITICAL] CWE-94 CVE-2025-27429: SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function modul SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the

CVE-2026-89107 [CRITICAL] CWE-94 CVE-2026-89107: SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges could submit specially crafted input, which is interpreted as executable ABAP code by the rule processing l

CVE-2026-34260 [CRITICAL] CWE-89 CVE-2026-34260: SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an a SAP S/4HANA (SAP Enterprise Search for ABAP) contains a SQL injection vulnerability that allows an authenticated attacker to inject malicious SQL statements through user-controlled input. The application directly concatenates this malicious user input into SQL queries, which are then passed to the underlying database without proper validation or sa

CVE-2021-38176 [HIGH] CWE-89 CVE-2021-38176: Due to improper input sanitization, an authenticated user with certain specific privileges can remot Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could completely compromise confidentiality, integrity, and availab

CVE-2021-33701 [CRITICAL] CWE-89 CVE-2021-33701: DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020, SAPSCORE 125, S4CORE 102, 102, 103, 104, 105, allows an attacker with access to highly privileged account to execute manipulated query in NDZT tool to gain access to Superuser account, leading to SQL

CVE-2026-0498 [HIGH] CWE-94 CVE-2026-0498: SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vul SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of fu

CVE-2022-22531 [HIGH] CVE-2022-22531: The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified.

CVE-2022-22530 [HIGH] CVE-2022-22530: The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application.

CVE-2026-66766 [HIGH] CWE-1333 CVE-2026-66766: SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial o SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could exhaust system resources and make the service unavaila

CVE-2026-44744 [MEDIUM] CWE-89 CVE-2026-44744: SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module com SAP S/4HANA(On-Premise) contains SQL injection vulnerability in a remote-enabled function module component that could be exploited by an authenticated attacker to potentially execute unauthorized database queries.This flaw exposes sensitive information to which they should not otherwise have access to. The vulnerability has a high impact on the confi

CVE-2025-42916 [HIGH] CWE-1287 CVE-2025-42916: Due to missing input validation, an attacker with high privilege access to ABAP reports could delete Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on confidentiality.

CVE-2025-42993 [MEDIUM] CWE-862 CVE-2025-42993: Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration could create an RFC destination and assign an arbitrary high-privilege user. This allows the attacker to consume events via the RFC destination, leading to code execution under the privileges of

CVE-2023-35870 [HIGH] CWE-732 CVE-2023-35870: When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4C When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 107, an attacker could intercept the save request and change the template, leading to an impact on confidentiality and integrity of the resource. Furthermore, a standard template could be deleted, hence making the resource temporarily

CVE-2026-44766 [MEDIUM] CWE-89 CVE-2026-44766: SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation. This could allow the user to access sensitive information, resulting in high impact on confidentiality, with no impact on integrity and av

CVE-2024-34691 [MEDIUM] CWE-862 CVE-2024-34691: Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. As a result, it has high impact on integrity and no impact on the confidentiality and availability of the system.

CVE-2025-43003 [MEDIUM] CWE-749 CVE-2025-43003: SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field. On performing this step the attacker could gain access to highly sensitive information. This could cause a high impact on confidentiality and minimal impact on integrity and availa

CVE-2025-42946 [MEDIUM] CWE-22 CVE-2025-42946: Due to directory traversal vulnerability in SAP S/4HANA (Bank Communication Management), an attacker Due to directory traversal vulnerability in SAP S/4HANA (Bank Communication Management), an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacker to potentially read or delete these files hence cau

CVE-2022-31597 [MEDIUM] CWE-862 CVE-2022-31597: Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application bus Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the da

CVE-2025-42984 [MEDIUM] CWE-862 CVE-2025-42984: SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an authenticated user. Due to this, an attacker could execute the function import on the entity making it inaccessible for unrestricted user. This has low impact on confidentiality and availability of the application.