CVE-2023-42475: SAP s/4hana

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality.

Affected products

• SAP s/4hana: version 102 only; version 103 only; version 104 only; version 105 only; version 106 only; version 128 only

Published 2023-10-10. Last modified 2026-06-17.