{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-17T15:25:31.105","vulnerabilities":[{"cve":{"id":"CVE-2024-30216","sourceIdentifier":"cna@sap.com","published":"2024-04-09T01:15:50.140","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, attacker can add notes in the review request with 'completed' status affecting the integrity of the application. Confidentiality and Availability are not impacted.\n\n"},{"lang":"es","value":"Cash Management en SAP S/4 HANA no realiza las verificaciones de autorización necesarias para un usuario autenticado, lo que resulta en una escalada de privilegios. Al explotar esta vulnerabilidad, el atacante puede agregar notas en la solicitud de revisión con el estado \"completado\" que afecta la integridad de la aplicación. La confidencialidad y la disponibilidad no se ven afectadas."}],"metrics":{"cvssMetricV31":[{"source":"cna@sap.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}]},"weaknesses":[{"source":"cna@sap.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://me.sap.com/notes/3427178","source":"cna@sap.com"},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364","source":"cna@sap.com"},{"url":"https://me.sap.com/notes/3427178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}