CVE-2025-27430CWE-918

Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)

Low · published March 11, 2025

CVSS v3.1
3.5
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.4th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-03-11T00:37Z
EPSS history
Timeline
  • 11 MAR 00:37Z
    Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)
    cvelistv5