Lucene search
+L

CVE-2023-40625

🗓️ 12 Sep 2023 02:00:13Reported by sapType 
cve
 cve
🔗 web.nvd.nist.gov👁 66 Views

S4CORE (Manage Purchase Contracts App) - versions 102-107, lacks authorization checks for authenticated user, allowing privilege escalation

Related
Detection
Affected
Refs
NVD
Vulners
Node
OR
saps4coreMatch102
saps4coreMatch103
saps4coreMatch104
saps4coreMatch105
saps4coreMatch106
saps4coreMatch107
[
  {
    "defaultStatus": "unaffected",
    "product": "SAP Manage Purchase Contracts App",
    "vendor": "SAP_SE",
    "versions": [
      {
        "status": "affected",
        "version": "S4CORE 102"
      },
      {
        "status": "affected",
        "version": "S4CORE 103"
      },
      {
        "status": "affected",
        "version": "S4CORE 104"
      },
      {
        "status": "affected",
        "version": "S4CORE 105"
      },
      {
        "status": "affected",
        "version": "S4CORE 106"
      },
      {
        "status": "affected",
        "version": "S4CORE 107"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:18Current
5.6Medium risk
Vulners AI Score5.6
CVSS 3.15.4
EPSS0.00367
SSVC
66