CVE-2025-43007 — Missing Authorization check in SAP Service Parts Management (SPM)

CVE-2025-43007

Missing Authorization check in SAP Service Parts Management (SPM) PUBLISHED

Description (CNA)

SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on confidentiality, integrity and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Service Parts Management (SPM)	affected SAP_APPL 617; affected 618; affected S4CORE 100; affected 101; affected 102; affected 103

CWE

CWE-862

References

https://me.sap.com/notes/2719724
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.