CVE-2025-43002

SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - cna@sap.com

Published

2025-05-13

Last modified

2025-05-13

Weaknesses

CWE-472

Affected products

• Sap S4hana Odata Meta-data Property (Sap Se)

References

• https://me.sap.com/notes/3227940
• https://url.sap/sapsecuritypatchday