CVE-2025-42991 — Missing Authorization check in SAP S/4HANA (Bank Account Application)

CVE-2025-42991

Missing Authorization check in SAP S/4HANA (Bank Account Application) PUBLISHED

Description (CNA)

SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S/4HANA (Bank Account Application)	affected S4CORE 108

CWE

CWE-862

References

https://me.sap.com/notes/3608058
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.