Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2025-27430

Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP CRM and SAP S/4HANA (Interaction Center)

Default version status: unaffected

  • S4CRM 100affected
  • 200affected
  • 204affected
  • 205affected
  • 206affected
  • S4FND 102affected
  • 103affected
  • 104affected
  • 105affected
  • 106affected
  • 107affected
  • 108affected
  • S4CEXT 107affected
  • BBPCRM 701affected
  • 702affected
  • 712affected
  • 713affected
  • 714affected
  • WEBCUIF 701affected
  • 731affected
  • 746affected
  • 747affected
  • 748affected
  • 800affected
  • 801affected

References