CVEvulnerability

CVE-2025-27430

3.5 LOW Published 2025-03-11 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-03-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.5 LOW — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
Weaknesses
CWE-918

Description

Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References