CVE-2025-42982CWE-862

Information Disclosure in SAP GRC (AC Plugin)

High · published June 10, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
32.3
In the wild
Unconfirmed
What it is

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00393 · 32.3th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-06-10T00:10Z
EPSS history
Timeline
  • 10 JUN 00:10Z
    Information Disclosure in SAP GRC (AC Plugin)
    cvelistv5