S\/4 hana

This hub aggregates every CVE we track for S\/4 hana. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting S\/4 hana.

• CVE-2026-0498Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)9.1Jan 13, 2026
• CVE-2024-45282HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)4.3Oct 8, 2024
• CVE-2024-34691Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files)6.5Jun 11, 2024
• CVE-2023-41368Insecure Direct Object Reference (IDOR) vulnerability in S4 HANA (Manage checkbook apps)2.7Sep 12, 2023
• CVE-2023-41369External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application)3.5Sep 12, 2023
• CVE-2020-26832SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA (SAP Landscape Transformation), versi...7.6Dec 9, 2020
• CVE-2020-6188VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform...8.8Feb 12, 2020