VULNERABILITY INTELLIGENCE

CVE-2024-34691

CVSS score6.5 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2024-06-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. As a result, it has high impact on integrity and no impact on the confidentiality and availability of the system.

Weakness classification

  • cna@sap.com: CWE-862

Primary references