CVE-2023-40306: SAP s/4hana

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validation. As a result, it may have a slight impact on confidentiality and integrity.

Affected products

• SAP s/4hana: version 103 only; version 104 only; version 105 only; version 106 only

Published 2023-09-08. Last modified 2026-06-17.