CVE-2022-32248
Last modified
CVE-2022-32248 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.. EPSS estimates a 0.57% chance of exploitation in the next 30 days.
Description
Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sap | S\/4hana | 101 |
| Sap | S\/4hana | 102 |
| Sap | S\/4hana | 103 |
| Sap | S\/4hana | 104 |
| Sap | S\/4hana | 105 |
| Sap | S\/4hana | 106 |
References
- https://launchpad.support.sap.com/#/notes/3216161Permissions Required, Vendor Advisory
- https://launchpad.support.sap.com/#/notes/3216161Permissions Required, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-32248?
How severe is CVE-2022-32248?
How do I fix CVE-2022-32248?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-32242When a user opens manipulated Radiance Picture (.hdr, hdr.x3…5.5
- CVE-2022-32243When a user opens manipulated Scalable Vector Graphics (.svg…5.5
- CVE-2022-32244Under certain conditions an attacker authenticated as a CMS …5.2
- CVE-2022-32245SAP BusinessObjects Business Intelligence Platform (Open Doc…8.2
- CVE-2022-32246SAP Busines Objects Business Intelligence Platform (Visual D…4.6
- CVE-2022-32247SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20,…6.1
- CVE-2022-32249Under special integration scenario of SAP Business one and S…7.5
- CVE-2022-3225Improper Control of Dynamically-Managed Code Resources in Gi…5.7
- CVE-2022-32250net/netfilter/nf_tables_api.c in the Linux kernel through 5.…7.8
- CVE-2022-32251A vulnerability has been identified in SINEMA Remote Connect…9.8
- CVE-2022-32252A vulnerability has been identified in SINEMA Remote Connect…7.8
- CVE-2022-32253A vulnerability has been identified in SINEMA Remote Connect…7.5
Are you affected by CVE-2022-32248?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST