Beveiligingsadvies

CVE-2025-42991

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-10 00:12:53
Laatst bijgewerkt 2025-06-10 15:15:32
Toegewezen door sap
CVSS-score 4.3
Status PUBLISHED

Beschrijving

SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.