Beveiligingsadvies

CVE-2025-42903

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-14 00:17:39
Laatst bijgewerkt 2025-10-14 15:22:42
Toegewezen door sap
CVSS-score 4.3
Status PUBLISHED

Beschrijving

A vulnerability in SAP Financial Service Claims Management RFC function ICL_USER_GET_NAME_AND_ADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability.