Versio.io

CVE-2022-22530

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 14-01-2022 09:15
Last modified: - 21-01-2022 10:07
Total changes: - 2

Description

The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to inject dangerous content or malicious code which could result in critical information being modified or completely compromise the availability of the application.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Low
Attack complexity
Network
Attack vector
High
Availability
None
Confidentiality
High
Integrity
Low
Privileges required
Unchanged
Scope
None
User interaction
8.1
Base score
2.8
5.2
Exploitability score
Impact score
 

Verification logic

OR
vendor=sap AND product=s\/4hana AND version=100
vendor=sap AND product=s\/4hana AND version=101
vendor=sap AND product=s\/4hana AND version=102
vendor=sap AND product=s\/4hana AND version=103
vendor=sap AND product=s\/4hana AND version=104
vendor=sap AND product=s\/4hana AND version=105
vendor=sap AND product=s\/4hana AND version=106
 

Reference

 


Keywords

NVD

 

CVE-2022-22530

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.