CVE-2025-42917 — Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application)

CVE-2025-42917

Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application) PUBLISHED

Description (CNA)

SAP HCM Approve Timesheets Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP HCM (Approve Timesheets Fiori 2.0 application)	affected GBX01HR5 605

CWE

CWE-862

References

https://me.sap.com/notes/3643832
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.