VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 24, 2026· Updated Feb 24, 2026

Information Disclosure vulnerability in S/4HANA (Manage Payment Media)

CVE-2026-24314

Description

Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.

Affected products

2
  • SAP/S/4HANAllm-create
  • SAP_SE/S/4HANA (Manage Payment Media)v5
    Range: UIAPFI70 600

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

7