Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-0058

Information Disclosure vulnerability in SAP Business Workflow and SAP Flexible Workflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

In SAP Business Workflow and SAP Flexible Workflow, an authenticated attacker can manipulate a parameter in an otherwise legitimate resource request to view sensitive information that should otherwise be restricted. The attacker does not have the ability to modify the information or to make the information unavailable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business Workflow and SAP Flexible Workflow

Default version status: unaffected

  • SAP_BASIS 753affected
  • SAP_BASIS 754affected
  • SAP_BASIS 755affected
  • SAP_BASIS 756affected
  • SAP_BASIS 757affected
  • SAP_BASIS 758affected
  • SAP_BASIS 912affected
  • SAP_BASIS 913affected
  • SAP_BASIS 914affected

References