Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-42917

Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application)

Description

SAP HCM Approve Timesheets Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP HCM (Approve Timesheets Fiori 2.0 application)

Default version status: unaffected

  • GBX01HR5 605affected

References