CVE-2023-41368: SAP s/4 Hana

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The OData service of the S4 HANA (Manage checkbook apps) - versions 102, 103, 104, 105, 106, 107, allows an attacker to change the checkbook name by simulating an update OData call.

Affected products

• SAP s/4 Hana: version 102 only; version 103 only; version 104 only; version 105 only; version 106 only; version 107 only

Published 2023-09-12. Last modified 2026-06-17.