CVE-2025-42915 — Missing Authorization Check in Fiori app (Manage Payment Blocks)

CVE-2025-42915

Missing Authorization Check in Fiori app (Manage Payment Blocks) PUBLISHED

Description (CNA)

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without affecting the availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / Fiori app (Manage Payment Blocks)	affected S4CORE 107; affected 108

CWE

CWE-862

References

https://me.sap.com/notes/3409013
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.