CVE-2025-43002CWE-472

Missing Authorization check in SAP S4/HANA (OData meta-data property)

Medium · published May 13, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
22.7
In the wild
Unconfirmed
What it is

SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.7th percentile
Weakness
CWE-472 · External Control of Assumed-Immutable Web Parameter
Published
2025-05-13T00:18Z
EPSS history
Timeline
  • 13 MAY 00:18Z
    Missing Authorization check in SAP S4/HANA (OData meta-data property)
    cvelistv5