CVE Tools
Track your stack

S\/4 Hana

7 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for S\/4 Hana. Use it to gauge the current risk picture and drill into individual advisories.

S\/4 Hana CVEs per month

Oct 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
S\/4 Hana CVEs per month
MonthCVEs
2024-101
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-011
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090

Severity

How the 7 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical114%
  • High229%
  • Medium229%
  • Low229%

Latest CVEs

The 7 most recently published vulnerabilities affecting S\/4 Hana.

  1. CVE-2026-0498Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)9.1
  2. CVE-2024-45282HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)4.3
  3. CVE-2024-34691Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files)6.5
  4. CVE-2023-41368Insecure Direct Object Reference (IDOR) vulnerability in S4 HANA (Manage checkbook apps)2.7
  5. CVE-2023-41369External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application)3.5
  6. CVE-2020-26832SAP AS ABAP (SAP Landscape Transformation), versions - 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 and SAP S4 HANA (SAP Landscape Transformation), versi...7.6
  7. CVE-2020-6188VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform...8.8

Product grouping is registry-driven, with AI assist and human review. How it works

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store