Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-42987

Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP S/4HANA (Manage Processing Rules - For Bank Statement)

Default version status: unaffected

  • S4CORE 104affected
  • 105affected
  • 106affected
  • 107affected
  • 108affected

References