Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-40625

S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user. This could allow an attacker to perform unintended actions resulting in escalation of privileges which has low impact on confidentiality and integrity with no impact on availibility of the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.4%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2023-40625
  • Sap » S4core » Version: 102
    cpe:2.3:a:sap:s4core:102
  • Sap » S4core » Version: 103
    cpe:2.3:a:sap:s4core:103
  • Sap » S4core » Version: 104
    cpe:2.3:a:sap:s4core:104
  • Sap » S4core » Version: 105
    cpe:2.3:a:sap:s4core:105
  • Sap » S4core » Version: 106
    cpe:2.3:a:sap:s4core:106
  • Sap » S4core » Version: 107
    cpe:2.3:a:sap:s4core:107


Contact Us

Shodan ® - All rights reserved