Lucene search
K

CVE-2023-40625

🗓️ 12 Sep 2023 02:00:13Reported by sapType 
cve
 cve
🔗 web.nvd.nist.gov👁 42 Views

S4CORE (Manage Purchase Contracts App) - versions 102-107, lacks authorization checks for authenticated user, allowing privilege escalation

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
CNNVD
SAP S4CORE Security Vulnerability
12 Sep 202300:00
cnnvd
Cvelist
CVE-2023-40625 Missing Authorization check in SAP Manage Purchase Contracts App
12 Sep 202302:00
cvelist
EUVD
EUVD-2023-45181
3 Oct 202520:07
euvd
NCSC
Vulnerabilities fixed in SAP products
14 Sep 202300:00
ncsc
NVD
CVE-2023-40625
12 Sep 202303:15
nvd
OSV
CVE-2023-40625
12 Sep 202303:15
osv
Prion
Authorization
12 Sep 202303:15
prion
Positive Technologies
PT-2023-27547 · S4Core · S4Core
11 Sep 202300:00
ptsecurity
Vulnrichment
CVE-2023-40625 Missing Authorization check in SAP Manage Purchase Contracts App
12 Sep 202302:00
vulnrichment
NVD
Vulners
Node
saps4coreMatch102
OR
saps4coreMatch103
OR
saps4coreMatch104
OR
saps4coreMatch105
OR
saps4coreMatch106
OR
saps4coreMatch107
[
  {
    "defaultStatus": "unaffected",
    "product": "SAP Manage Purchase Contracts App",
    "vendor": "SAP_SE",
    "versions": [
      {
        "status": "affected",
        "version": "S4CORE 102"
      },
      {
        "status": "affected",
        "version": "S4CORE 103"
      },
      {
        "status": "affected",
        "version": "S4CORE 104"
      },
      {
        "status": "affected",
        "version": "S4CORE 105"
      },
      {
        "status": "affected",
        "version": "S4CORE 106"
      },
      {
        "status": "affected",
        "version": "S4CORE 107"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:18Current
5.6Medium risk
Vulners AI Score5.6
CVSS 3.15.4
EPSS0.00305
SSVC
42