Логотип exploitDog
bind:CVE-2025-42987
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-42987

Количество 3

Количество 3

nvd логотип

CVE-2025-42987

8 месяцев назад

SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application.

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-hgfm-jj39-9pfh

8 месяцев назад

SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application.

CVSS3: 4.3
EPSS: Низкий
fstec логотип

BDU:2025-10423

8 месяцев назад

Уязвимость компонента Manage Processing Rules (For Bank Statement) программной платформы SAP S/4HANA, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-42987

SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application.

CVSS3: 4.3
0%
Низкий
8 месяцев назад
github логотип
GHSA-hgfm-jj39-9pfh

SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter. Due to missing authorization check, the attacker can edit rules that should be restricted, compromising the integrity of the application.

CVSS3: 4.3
0%
Низкий
8 месяцев назад
fstec логотип
BDU:2025-10423

Уязвимость компонента Manage Processing Rules (For Bank Statement) программной платформы SAP S/4HANA, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

CVSS3: 4.3
0%
Низкий
8 месяцев назад

Уязвимостей на страницу