CVE-2024-21736

Summary

CVE-2024-21736 is a vulnerability affecting the SAP S/4HANA Finance module, specifically versions SAPSCORE 128 and S4CORE 107 of Advanced Payment Management. The issue lies in insufficient authorization checks, enabling an attacker to trigger a function import. This vulnerability does not pose a significant threat to the application's confidentiality, but it allows the creation of in-house bank accounts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.