CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-31597
Severity
MEDIUM
CVSS
5.4
EPSS
0.42%
Original NVD Description
Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.
Related CVEs
Other vulnerabilities affecting the same vendor(s)