CVE-2025-25241CWE-862

Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests)

Medium · published February 11, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00221 · 12.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-02-11T00:37Z
EPSS history
Timeline
  • 11 FEB 00:37Z
    Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests)
    cvelistv5