CVEvulnerability

CVE-2025-42923

4.3 MEDIUM Published 2025-09-09 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-09-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-352

Description

Due to insufficient CSRF protection in SAP Fiori App Manage Work Center Groups, an authenticated user could be tricked by an attacker to send unintended request to the web server. This has low impact on integrity and no impact on confidentiality and availability of the application.

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References