CVE-2026-24314CWE-497

Information Disclosure vulnerability in S/4HANA (Manage Payment Media)

Medium · published February 24, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00227 · 12.7th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-02-24T05:23Z
EPSS history
Timeline
  • 24 FEB 05:23Z
    Information Disclosure vulnerability in S/4HANA (Manage Payment Media)
    cvelistv5