CVE-2026-24314 MEDIUM

CVE-2026-24314: Information Disclosure vulnerability in S/4HANA (Manage Payment Media)

Vendor Sap_Se
Product S/4HANA (Manage Payment Media)
Weakness CWE-497
Published February 24, 2026
Last update February 24, 2026
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and availability are not impacted.

Key dates

02Disclosure timeline

February 24, 2026 CVE published
February 24, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-2236 Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication. CVE-2025-23969 WordPress KI Live Video Conferences plugin <= 5.5.15 - Sensitive Data Exposure Vulnerability CVE-2025-3606 Vestel AC Charger Exposure of Sensitive System Information to an Unauthorized Control Sphere CVE-2023-37525 HCL BigFix Compliance is vulnerable to a sensitive information disclosure CVE-2024-8687 PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes