CVE-2025-27433 — Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)

CVE-2025-27433

Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements) PUBLISHED

Description (CNA)

The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reversed bank statement. This vulnerability has a low impact on the application's integrity, with no effect on confidentiality and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S/4HANA (Manage Bank Statements)	affected S4CORE 107; affected 108

CWE

CWE-639

References

https://me.sap.com/notes/3565835
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.