Skip to content
Medium 6.5

Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application)

CVE-2025-42917 First seen on SecPulse

Summary

SAP HCM Approve Timesheets Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected.

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details