CVE-2025-42915CWE-862

Missing Authorization Check in Fiori app (Manage Payment Blocks)

Medium · published September 9, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without affecting the availability.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00197 · 9.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-09-09T02:06Z
EPSS history
Timeline
  • 09 SEP 02:06Z
    Missing Authorization Check in Fiori app (Manage Payment Blocks)
    cvelistv5