CVE-2023-42473 MEDIUM

CVE-2023-42473: Missing Authorization Check In S/4HANA (Manage Withholding Tax Items)

Vendor Sap_Se
Product S/4HANA (Manage Withholding Tax Items)
Weakness CWE-862 · Missing authorization
Published October 10, 2023
Last update February 27, 2025
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges which has low impact on the confidentiality and integrity of the application.

Key dates

02Disclosure timeline

October 10, 2023 CVE published
February 27, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-38745 WordPress Wholesale Suite plugin <= 2.1.12 - Broken Access Control vulnerability CVE-2022-2543 Visual Portfolio < 2.18.0 - Unauthenticated CSS Injection CVE-2025-9979 Maspik <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export CVE-2025-14798 LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API CVE-2020-36670 NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actions