中
6.5
Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application)
CVE-2025-42917
SecPulse初出
概要
SAP HCM Approve Timesheets Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected.
参照URL
- web me.sap.com
- web url.sap