CVE-2022-31597CWE-862

Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform…

published July 12, 2022

CVSS
—
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.7th percentile
Weakness
CWE-862 · Missing Authorization
Published
2022-07-12T20:27Z
EPSS history
Timeline
  • 12 JUL 20:27Z
    Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform…
    cvelistv5