Threat Investigation
Request a demo

CVE-2022-22542

Medium

Description

S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitly authorized to have access to that information, which could compromise Confidentiality.

SeverityMedium
CVSS6.5
Exploit probability—
ProductSap S\/4hana
PublishedFeb 9, 2022
First seenFeb 9, 2022
Weakness typeCWE-200Sensitive information exposure

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
sap s\/4hana104, 105, 106—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.