CVEvulnerability

CVE-2025-0058

6.5 MEDIUM Published 2025-01-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-639

Description

In SAP Business Workflow and SAP Flexible Workflow, an authenticated attacker can manipulate a parameter in an otherwise legitimate resource request to view sensitive information that should otherwise be restricted. The attacker does not have the ability to modify the information or to make the information unavailable.

Affected configurations

• sap sap basis 753 • sap sap basis 754 • sap sap basis 755 • sap sap basis 756 • sap sap basis 757 • sap sap basis 758 • sap sap basis 912 • sap sap basis 913 • sap sap basis 914

Related

Weakness · CWE (1)

  • CWE-639 Authorization Bypass Through User-Controlled Key weakness

References