CVE-2025-43003
Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)
SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field. On performing this step the attacker could gain access to highly sensitive information. This could cause a high impact on confidentiality and minimal impact on integrity and availability of the application.
Reserved 2025-04-16 | Published 2025-05-13 | Updated 2025-05-13 | Assigner sapCWE-749: Exposed Dangerous Method or Function
Support options
