中
6.5
Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
CVE-2025-42912
SecPulse初出
概要
SAP HCM My Timesheet Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected.
参照URL
- web me.sap.com
- web url.sap