Vulnetix
Try Vulnetix Request Demo
CVE-2022-31597 PUBLISHED CVSS 5.5 MEDIUM

Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.

EPSS 0.14% · 34.6th percentile

Risk Scores

CVSS v2.0
5.5
EPSS Score
0.14%
34.6th percentile

Affected Products

VendorProductVersions
saps\/4hana101, 102, 103
SAP SESAP S/4HANASAPSCORE 127, S4CORE 101, 102
sapsapscore127

Timeline

References

Open in Interactive Console →