Medium severity6.5NVD Advisory· Published Feb 14, 2023· Updated Jun 17, 2026

CVE-2023-24524

Description

SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to delete the data with a high impact to availability.

Affected products

SAP/S\/4hana2 versions
cpe:2.3:a:sap:s\/4hana:104:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:s\/4hana:104:*:*:*:*:*:*:*
- cpe:2.3:a:sap:s\/4hana:105:*:*:*:*:*:*:*
SAP/SAP S/4HANA Map Treasury Correspondence Format Datallm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 104

Patches

Vulnerability mechanics

References

launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000