CVE-2025-43002 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted.

Reserved 2025-04-16 | Published 2025-05-13 | Updated 2025-05-13 | Assigner sap

MEDIUM: 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-472: External Control of Assumed-Immutable Web Parameter

Product status

Default status

unaffected

S4CORE 102

affected

103

affected

104

affected

105

affected

106

affected

References

me.sap.com/notes/3227940

url.sap/sapsecuritypatchday

cve.org (CVE-2025-43002)

nvd.nist.gov (CVE-2025-43002)

Download JSON

https://cve.threatint.eu/CVE/CVE-2025-43002

Support options

Helpdesk Chat, Email, Knowledgebase