Threats Tagged 'ghsa-4hm3-8c23-x5v9'

CVE-2026-76961 is a Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA Finance for Advanced Payment Management. The product does not sufficiently protect certain requests against CSRF attacks. An attacker with low privileges could craft a malicious link or page that, if visited by an authenticated user, could trigger unintended actions on the server. The impact is limited to a low confidentiality and integrity impact, with no availability impact.