Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-42991

Missing Authorization check in SAP S/4HANA (Bank Account Application)

Description

SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP S/4HANA (Bank Account Application)

Default version status: unaffected

  • S4CORE 108affected

References