CVE-2024-4139: SAP SE SAP s/4 Hana Manage Bank Statement Reprocessing Rules

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can delete rules of other users affecting the integrity of the application. Confidentiality and Availability are not affected.

Affected products

• SAP SE SAP s/4 Hana Manage Bank Statement Reprocessing Rules: version S4CORE 105 only; version S4CORE 106 only; version S4CORE 107 only; version S4CORE 108 only

Published 2024-05-14. Last modified 2026-06-17.