Security Advisory
CVE-2025-42991
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated approver user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.