Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-24314 EUVD-2026-7386GHSA-3grc-c2rj-3qj5

Information Disclosure vulnerability in S/4HANA (Manage Payment Media)

Published Feb 24, 2026 · Updated Feb 24, 2026 · Assigned by sap

Description

Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.

Affected products

VendorProductAffectedFixed
SAP_SE S/4HANA (Manage Payment Media) UIAPFI70 600, 700, 800, 900, 901, 902, UIS4H 109 —

References