CVE-2022-31597: SAP s/4hana

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.

Affected products

• SAP s/4hana: version 101 only; version 102 only; version 103 only; version 104 only; version 105 only; version 106 only
• SAP Sapscore: version 127 only

Published 2022-07-12. Last modified 2026-06-17.