CVE-2026-24314
Information Disclosure vulnerability in S/4HANA (Manage Payment Media)
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
24 feb 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Productos afectados
SAP_SE · S/4HANA (Manage Payment Media)¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →