BaseFortify

Publication date: 2025-11-11

Last updated on: 2025-11-12

Assigner: SAP SE

Description

SAP S4CORE (Manage journal entries) does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges. This has low impact on confidentiality of the application with no impact on integrity and availability of the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-11

Last Modified

2025-11-12

Generated

2026-07-06

AI Q&A

2025-11-11

EPSS Evaluated

2026-07-05

NVD

CVE-2025-42899

Affected Vendors & Products

Vendor	Product	Version / Range
sap	s4core	3.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability in SAP S4CORE (Manage journal entries) occurs because the system does not perform necessary authorization checks for an authenticated user, which allows that user to escalate their privileges.

Impact Analysis

The vulnerability can lead to escalation of privileges by an authenticated user, potentially allowing them to perform actions beyond their intended permissions. It has a low impact on confidentiality and no impact on integrity or availability of the application.

Hi! I’m here to help you understand CVE-2025-42899. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70