Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2025-43003

Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field. On performing this step the attacker could gain access to highly sensitive information. This could cause a high impact on confidentiality and minimal impact on integrity and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP S/4HANA (Private Cloud & On-Premise)

Default version status: unaffected

  • S4CRM 204affected
  • 205affected
  • 206affected
  • S4CEXT 107affected
  • 108affected
  • BBPCRM 702affected
  • 712affected
  • 713affected
  • 714affected

References