Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-42982

Information Disclosure in SAP GRC (AC Plugin)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP GRC (AC Plugin)

Default version status: unaffected

  • GRCPINW V1100_700affected
  • V1100_731affected

References