CVEvulnerability
CVE-2025-43000
7.9 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-05-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.9 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
- Weaknesses
- CWE-862
Description
Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application.
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://me.sap.com/notes/3586013 me.sap.com
- https://url.sap/sapsecuritypatchday url.sap