CVE-2025-42912

SAP HCM My Timesheet Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected.

Score
CVSS 3.1 6.5 Medium
Status
Deferred - cna@sap.com
Published
2025-09-09
Last modified
2026-02-26
Weaknesses
CWE-862

Affected products

References

 
 
© AVABIS GmbH privacypolicy about