CVE-2025-42991

published 2025-06-10

CVE-2025-42991: SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C N I L A N

SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_s_4hana	—	—

CWE-862