CVE-2025-26655 — Missing Authorization check in SAP JIT(Outbound)

CVE-2025-26655

Missing Authorization check in SAP JIT(Outbound) PUBLISHED

Description (CNA)

SAP Just In Time(JIT) does not perform necessary authorization checks for an authenticated user, allowing attacker to escalate privileges that would otherwise be restricted, potentially causing a low impact on the integrity of the application.Confidentiality and Availability are not impacted.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Just In Time	affected S4CORE 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected ECC-DIMP 618

CWE

CWE-862

References

https://me.sap.com/notes/3347991
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.