CVE-2025-43003
Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise)
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.4EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
13 may 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field. On performing this step the attacker could gain access to highly sensitive information. This could cause a high impact on confidentiality and minimal impact on integrity and availability of the application.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L
Productos afectados
SAP_SE · SAP S/4HANA (Private Cloud & On-Premise)¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →