CVE-2025-43002 — Missing Authorization check in SAP S4/HANA (OData meta-data property)

CVE-2025-43002

Missing Authorization check in SAP S4/HANA (OData meta-data property) PUBLISHED

Description (CNA)

SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S4/HANA (OData meta-data property)	affected S4CORE 102; affected 103; affected 104; affected 105; affected 106

CWE

CWE-472

References

https://me.sap.com/notes/3227940
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.