Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-42923

Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)

Description

Due to insufficient CSRF protection in SAP Fiori App Manage Work Center Groups, an authenticated user could be tricked by an attacker to send unintended request to the web server. This has low impact on integrity and no impact on confidentiality and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Fiori App (F4044 Manage Work Center Groups)

Default version status: unaffected

  • UIS4HOP1 600affected
  • 700affected
  • 800affected
  • 900affected

References