PT-2022-15500 · Sap · Sap S/4Hana

Published 2022-01-14 · Updated 2026-02-24 · CVE-2022-22530

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP S/4HANA versions 100 through 106

Description The F0743 Create Single Payment application does not check uploaded or downloaded files, allowing an attacker with basic user rights to inject dangerous content or malicious code. This could result in critical information being modified or completely compromise the availability of the application.

Recommendations For versions 100 through 106, consider implementing file checking mechanisms for uploaded and downloaded files to prevent malicious code injection. As a temporary workaround, restrict access to file uploads and downloads to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2022-22530

Affected Products

Sap S/4Hana

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-22530 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22530 · Vendor Advisory
• https://t.me/cveNotify/153058 · Telegram Post
• https://launchpad.support.sap.com/#/notes/3112928 · Note
• https://t.me/cvenotify/53993 · Telegram Post