CVE-2025-27433CWE-639

Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)

Medium · published March 11, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reversed bank statement. This vulnerability has a low impact on the application's integrity, with no effect on confidentiality and availability of the application.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-03-11T00:38Z
EPSS history
Timeline
  • 11 MAR 00:38Z
    Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)
    cvelistv5