CVE-2024-30216: SAP SE SAP s/4 Hana Cash Management

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, attacker can add notes in the review request with 'completed' status affecting the integrity of the application. Confidentiality and Availability are not impacted.

Affected products

• SAP SE SAP s/4 Hana Cash Management: version S4CORE 103 only; version S4CORE 104 only; version S4CORE 105 only; version S4CORE 106 only; version S4CORE 107 only; version S4CORE 108 only

Published 2024-04-09. Last modified 2026-06-17.