CVE-2025-25241 — Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests)

CVE-2025-25241

Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests) PUBLISHED

Description (CNA)

Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Fiori Apps Reference Library (My Overtime Requests)	affected GBX01HR5 605

CWE

CWE-862

References

https://me.sap.com/notes/3532025
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.