CVE-2024-39592: SAP s4core

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This allows an attacker to read sensitive information causing high impact on the confidentiality of the application.

Affected products

• SAP s4core: version 102 only; version 103 only
• SAP s4coreop: version 104 only; version 105 only; version 106 only; version 107 only; version 108 only

Published 2024-07-09. Last modified 2026-06-17.