CVE-2022-31589
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP ERP, localization for CEE countries.
- Vendor
- SAP SE
- Product
- SAP ERP, localization for CEE countries.
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| C-CEE 110_600 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 110_602 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 110_603 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 110_604 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 110_700 | affected | Unavailable | Unavailable | Unavailable | None listed |
SAP Financials
- Vendor
- SAP SE
- Product
- SAP Financials
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| SAP_FIN 618 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 720 | affected | Unavailable | Unavailable | Unavailable | None listed |
SAP S/4Hana Core
- Vendor
- SAP SE
- Product
- SAP S/4Hana Core
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| S4CORE 100 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 101 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 102 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 103 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 104 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 105 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 106 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 107 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 108 | affected | Unavailable | Unavailable | Unavailable | None listed |