CVE-2026-24314 — Information Disclosure vulnerability in S/4HANA (Manage Payment Media)

CVE-2026-24314

Information Disclosure vulnerability in S/4HANA (Manage Payment Media) PUBLISHED

Description (CNA)

Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.

Affected (CNA)

Vendor / product	Versions
SAP_SE / S/4HANA (Manage Payment Media)	affected UIAPFI70 600; affected 700; affected 800; affected 900; affected 901; affected 902; affected UIS4H 109

CWE

CWE-497

References

https://me.sap.com/notes/3646297
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.