CVE Vulnerabilities

CVE-2022-22530

Published: Jan 14, 2022 | Modified: Jul 10, 2023
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:S/C:N/I:P/A:C
RedHat/V2
RedHat/V3
Ubuntu

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application.

Affected Software

Name Vendor Start Version End Version
S/4hana Sap 100 100
S/4hana Sap 101 101
S/4hana Sap 102 102
S/4hana Sap 103 103
S/4hana Sap 104 104
S/4hana Sap 105 105
S/4hana Sap 106 106

References