An improper input validation vulnerability in SAP S/4HANA allows authenticated users with high privileges to perform unauthorized data deletion, threatening database integrity and availability.

This flaw stems from improper input validation (CWE-1287) within ABAP reports. An attacker who has already obtained high privileges can execute commands to purge data from arbitrary database tables that lack protection by an authorization group.

The exploitation of this vulnerability results in a significant impact on data integrity and service availability, as an attacker can irreversibly delete critical business information. Given the CVSS score of 8.1, the risk is high: while confidentiality remains unaffected, the potential for permanent data loss and subsequent operational disruption poses a severe threat to business continuity.

Immediate Action: Apply the vendor-provided security updates documented in SAP Security Note 3635475 to patch affected S4CORE versions.

Proactive Monitoring: Review ABAP report execution logs and database transaction logs for anomalous deletion patterns or unauthorized access to sensitive tables.

Compensating Controls: Ensure that all critical database tables are protected by appropriate authorization groups to restrict access, even if the primary vulnerability is exploited.

Public Exploit Available: No

Organizations running the affected versions of SAP S/4HANA must prioritize the deployment of the vendor-supplied security patches. Given the potential for total loss of data integrity within affected tables, administrators should verify that existing authorization groups are correctly configured as a defensive layer while the update process is underway.