VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Oct 10, 2023· Updated Jun 17, 2026

CVE-2023-42475

CVE-2023-42475

Description

The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality.

Affected products

8
  • SAP/S\/4hana6 versions
    cpe:2.3:a:sap:s\/4hana:102:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:sap:s\/4hana:102:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:103:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:104:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:105:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:106:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:s\/4hana:128:*:*:*:*:*:*:*
  • SAP/Statutory Reportingllm-fuzzy
  • SAP/S/4HANAcpe-rescue
    Range: S4CORE 102

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.