CVE-2025-42923 — Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)

CVE-2025-42923

Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups) PUBLISHED

Description (CNA)

Due to insufficient CSRF protection in SAP Fiori App Manage Work Center Groups, an authenticated user could be tricked by an attacker to send unintended request to the web server. This has low impact on integrity and no impact on confidentiality and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Fiori App (F4044 Manage Work Center Groups)	affected UIS4HOP1 600; affected 700; affected 800; affected 900

CWE

CWE-352

References

https://me.sap.com/notes/3450692
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.