Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-27433

Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)

Description

The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reversed bank statement. This vulnerability has a low impact on the application's integrity, with no effect on confidentiality and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP S/4HANA (Manage Bank Statements)

Default version status: unaffected

  • S4CORE 107affected
  • 108affected

References