SAP S/4HANA
自 2023 年 1 月以来共 44 条安全说明。
| 补丁日 | 编号 | 标题 | 优先级 | CVSS |
|---|---|---|---|---|
| 2026年10月 | 3805589 | Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules) | 严重 | 9.9 |
| 2026年10月 | 3799621 | Missing Authorization Check in SAP S/4HANA (Linear Asset Management RAP Business Object) | 中 | 4.7 |
| 2026年9月 | 3756450 | SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation) | 中 | 6.5 |
| 2026年9月 | 3365276 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) | 中 | 4.3 |
| 2026年9月 | 3371336 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) | 中 | 4.3 |
| 2026年9月 | 3365311 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management) | 中 | 4.3 |
| 2026年9月 | 3657599 | Missing Authorization check in SAP S/4HANA (Manage Bank Chains app) | 中 | 4.3 |
| 2026年9月 | 3485073 | Denial of Service (DoS) due to use of third-party component in SAP S/4HANA (Manage Supply Protection) | 高 | 7.5 |
| 2026年8月 | 3669608 | Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items) | 中 | 4.3 |
| 2026年8月 | 3485073 | Denial of Service (DoS) due to use of third-party component in SAP S/4HANA (Manage Supply Protection) | 高 | 7.5 |
| 2026年7月 | 3515598 | Missing Authorization check in SAP S/4HANA (Draft operation) | 中 | 4.3 |
| 2026年7月 | 3713902 | Missing Authorization check in SAP S/4 HANA (Create Single Payment) | 中 | 4.3 |
| 2026年6月 | 3751691 | SQL Injection vulnerability in SAP S/4HANA | 中 | 6.5 |
| 2026年5月 | 3724838 | SQL injection vulnerability in SAP S/4HANA (SAP Enterprise Search for ABAP) | 严重 | 9.6 |
| 2026年4月 | 3703813 | Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise) | 中 | 4.9 |
| 2026年2月 | 3646297 | Information Disclosure vulnerability in SAP S/4HANA (Manage Payment Media) | 中 | 4.3 |
| 2026年1月 | 3694242 | Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise) | 严重 | 9.1 |
| 2025年10月 | 3441087 | Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application) | 中 | 5.4 |
| 2025年10月 | 3625683 | Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statements) | 中 | 4.3 |
| 2025年9月 | 3635475 | Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise) | 高 | 8.1 |
| 2025年8月 | 3627998 | Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise) | 严重 | 9.9 |
| 2025年8月 | 3581961 | Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise) | 严重 | 9.9 |
| 2025年8月 | 3614804 | Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management) | 中 | 6.9 |
| 2025年8月 | 3616863 | CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice) | 中 | 4.3 |
| 2025年7月 | 3580384 | Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) | 中 | 6.7 |
| 2025年6月 | 3580384 | Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) | 中 | 6.7 |
| 2025年6月 | 3441087 | Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application) | 中 | 5.4 |
| 2025年6月 | 3596850 | Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement) | 中 | 4.3 |
| 2025年6月 | 3608058 | Missing Authorization check in SAP S/4HANA (Bank Account Application) | 中 | 4.3 |
| 2025年5月 | 3596033 | Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise) | 中 | 6.4 |
| 2025年5月 | 3227940 | Missing Authorization check in SAP S4/HANA (OData meta-data property) | 中 | 4.3 |
| 2025年4月 | 3581961 | Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise) | 严重 | 9.9 |
| 2025年4月 | 3446649 | Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4 HANA (Learning Solution) | 中 | 4.6 |
| 2025年3月 | 3565835 | Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements) | 中 | 4.3 |
| 2025年3月 | 3557131 | Missing Authorization check in SAP S/4HANA (RBD) | 中 | 4.3 |
| 2024年10月 | 3251893 | HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements) | 中 | 4.3 |
| 2024年9月 | 3437585 | Information Disclosure in SAP S/4 HANA (Statutory Reports) | 中 | 4.3 |
| 2024年6月 | 3466175 | Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files) | 中 | 6.5 |
| 2024年5月 | 3460772 | Cross-Site Scripting (XSS) Vulnerability in SAP S/4HANA (Document Service Handler for DPS) | 中 | 6.1 |
| 2024年5月 | 3434666 | Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules) | 中 | 4.3 |
| 2024年4月 | 3156972 | URL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search) | 中 | 6.1 |
| 2024年4月 | 3427178 | Missing Authorization check in SAP S/4 HANA (Cash Management) | 中 | 4.3 |
| 2024年4月 | 3430173 | Missing Authorization check in SAP S/4 HANA (Cash Management) | 中 | 4.3 |
| 2023年10月 | 3219846 | Missing Authorization Check In S/4HANA (Manage Withholding Tax Items) | 中 | 5.4 |
| 2023年9月 | 3156972 | URL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search) | 中 | 6.1 |
| 2023年9月 | 3369680 | External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application) | 低 | 3.5 |
| 2023年7月 | 3341211 | Improper Access Control in SAP S/4HANA (Manage Journal Entry Template) | 中 | 6.3 |
| 2023年6月 | 3142092 | Information Disclosure vulnerability in SAP S/4HANA (Supplier Factsheet and Enterprise Search for Business Partner, Supplier and Customer) | 中 | 6.5 |
| 2023年2月 | 2985905 | Missing Authorization check in SAP S/4 HANA Map Treasury Correspondence Format Data | 中 | 6.5 |