๐Ÿ” CVE Alert

CVE-2026-24314

MEDIUM 4.3

Information Disclosure vulnerability in S/4HANA (Manage Payment Media)

CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th

Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.

Vendor sap_se
Product s/4hana (manage payment media)
Published Feb 24, 2026
Last Updated Feb 24, 2026
Stay Ahead of the Next One

Get instant alerts for sap_se s/4hana (manage payment media)

Be the first to know when new medium vulnerabilities affecting sap_se s/4hana (manage payment media) are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Affected Versions

SAP_SE / S/4HANA (Manage Payment Media)
UIAPFI70 600 700 800 900 901 902 UIS4H 109

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
me.sap.com: https://me.sap.com/notes/3646297 url.sap: https://url.sap/sapsecuritypatchday