CVE-2026-24314mediumCWE-497

CVE-2026-24314: medium-severity vulnerability in SAP_SE S/4HANA (Manage Payment Media)

Information Disclosure vulnerability in S/4HANA (Manage Payment Media)

Published

Follow this CVE+ Monitor SAP S/4HANA

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.2%
Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
SAP_SE · S/4HANA (Manage Payment Media)