CVE-2022-31589

sap erp financial accounting, sap erp localization for cee countries, sap s/4hana

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-31589

Katalog CVE

CVSS 6.5 · Medium EPSS 0,67%

Kerentanan Incorrect Authorization pada sap erp financial accounting, sap erp localization for cee countries +1 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.

Rincian

Terbit di NVD
14 Juni 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-863: Incorrect Authorization
EPSS (30 hari)
0,67% peluang dieksploitasi; lebih tinggi dari 50,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
sap erp financial accounting Versi 618
sap erp financial accounting Versi 720
sap erp localization for cee countries Versi c-cee_110_600
sap erp localization for cee countries Versi c-cee_110_602
sap erp localization for cee countries Versi c-cee_110_603
sap erp localization for cee countries Versi c-cee_110_604
sap erp localization for cee countries Versi c-cee_110_700
sap s/4hana Versi 100
sap s/4hana Versi 101
sap s/4hana Versi 102
sap s/4hana Versi 103
sap s/4hana Versi 104
sap s/4hana Versi 105
sap s/4hana Versi 106
sap s/4hana Versi 107
sap s/4hana Versi 108

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.