CVE-2024-30217: SAP SE SAP s/4 Hana Cash Management

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can approve or reject a bank account application affecting the integrity of the application. Confidentiality and Availability are not impacted.

Affected products

• SAP SE SAP s/4 Hana Cash Management: version S4CORE 106 only; version S4CORE 107 only; version S4CORE 108 only

Published 2024-04-09. Last modified 2026-06-17.