VULNERABILITY INTELLIGENCE
CVE-2022-32248
CVSS score5.3 MEDIUM
EPSS probability0.66%
CISA KEVNot currently listed
Published2022-07-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
Weakness classification
- cna@sap.com: CWE-20
Primary references
- cna@sap.com — Permissions Required, Vendor Advisory
- cna@sap.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory