{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-03T22:55:30.243","vulnerabilities":[{"cve":{"id":"CVE-2022-31597","sourceIdentifier":"cna@sap.com","published":"2022-07-12T21:15:10.143","lastModified":"2026-06-17T04:45:45.347","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data."},{"lang":"es","value":"Dentro de SAP S/4HANA - versiones S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE versión 127, la extensión de la aplicación de socios comerciales para España/Eslovaquia no lleva a cabo las comprobaciones de autorización necesarias para un usuario autenticado con pocos privilegios a través de la red, resultando en una escalada de privilegios que presenta un impacto bajo en la confidencialidad e integridad de los datos"}],"affected":[{"source":"cna@sap.com","affectedData":[{"vendor":"SAP SE","product":"SAP S/4HANA","versions":[{"version":"S4CORE 101","status":"affected"},{"version":"102","status":"affected"},{"version":"103","status":"affected"},{"version":"104","status":"affected"},{"version":"105","status":"affected"},{"version":"106","status":"affected"},{"version":"SAPSCORE 127","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","baseScore":5.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cna@sap.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:s\\/4hana:101:*:*:*:*:*:*:*","matchCriteriaId":"E6FE144C-BAF2-4E45-93EE-D70764BDEFD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:s\\/4hana:102:*:*:*:*:*:*:*","matchCriteriaId":"55BACB30-A607-410E-AB05-E991CC19CE12"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:s\\/4hana:103:*:*:*:*:*:*:*","matchCriteriaId":"95A0C742-4CBD-46B8-B2B3-5949EFC82A6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:s\\/4hana:104:*:*:*:*:*:*:*","matchCriteriaId":"14A540DA-F234-4EEA-ADE8-4F6306A86C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:s\\/4hana:105:*:*:*:*:*:*:*","matchCriteriaId":"088EF501-76F9-44EC-B8B9-AED6F6096C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:s\\/4hana:106:*:*:*:*:*:*:*","matchCriteriaId":"E0023602-B509-4B20-9B29-20EEE88E1692"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapscore:127:*:*:*:*:*:*:*","matchCriteriaId":"0B2FC5C8-4459-4D5F-B06F-EF52D20AD451"}]}]}],"references":[{"url":"https://launchpad.support.sap.com/#/notes/3213826","source":"cna@sap.com","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html","source":"cna@sap.com","tags":["Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/3213826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}