CVE-2025-42982 — Information Disclosure in SAP GRC (AC Plugin)

CVE-2025-42982

Information Disclosure in SAP GRC (AC Plugin) PUBLISHED

Description (CNA)

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP GRC (AC Plugin)	affected GRCPINW V1100_700; affected V1100_731

CWE

CWE-862

References

https://me.sap.com/notes/3609271
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.