CVE-2025-42923CWE-352

Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)

Medium · published September 9, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Due to insufficient CSRF protection in SAP Fiori App Manage Work Center Groups, an authenticated user could be tricked by an attacker to send unintended request to the web server. This has low impact on integrity and no impact on confidentiality and availability of the application.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.6th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2025-09-09T02:09Z
EPSS history
Timeline
  • 09 SEP 02:09Z
    Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)
    cvelistv5