Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-43009

Missing Authorization check in SAP Service Parts Management (SPM)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Service Parts Management (SPM)

Default version status: unaffected

  • SAP_APPL 600affected
  • 602affected
  • 603affected
  • 604affected
  • 605affected
  • 606affected
  • 616affected
  • 617affected
  • 618affected
  • S4CORE 100affected
  • 101affected
  • 102affected

References