- Description
- Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
- Source
- cna@sap.com
- NVD status
- Modified
CVSS 3.1
- Type
- Primary
- Base score
- 5.3
- Impact score
- 1.4
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:P/A:N
- cna@sap.com
- CWE-20
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:101:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6FE144C-BAF2-4E45-93EE-D70764BDEFD6"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:102:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55BACB30-A607-410E-AB05-E991CC19CE12"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:103:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95A0C742-4CBD-46B8-B2B3-5949EFC82A6D"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:104:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14A540DA-F234-4EEA-ADE8-4F6306A86C1E"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:105:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "088EF501-76F9-44EC-B8B9-AED6F6096C03"
},
{
"criteria": "cpe:2.3:a:sap:s\\/4hana:106:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0023602-B509-4B20-9B29-20EEE88E1692"
}
],
"operator": "OR"
}
]
}
]