CVE-2025-30016criticalCWE-921

CVE-2025-30016: critical vulnerability in SAP_SE SAP Financial Consolidation

Authentication Bypass Vulnerability in SAP Financial Consolidation

Published · Updated

Follow this CVE+ Monitor SAP Financial Consolidation

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.6%
SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the Admin account. The vulnerability arises due to improper authentication mechanisms, due to which there is high impact on the Confidentiality, Integrity & Availability of the application.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
SAP_SE · SAP Financial Consolidation
Related CVEs — SAP_SE SAP Financial Consolidation

In the same product, most dangerous first.

CVE-2024-37177HIGHCross-Site Scripting (XSS) vulnerabilities in SAP Financial ConsolidationEPSS 0.4%CVE-2024-37178MEDIUMCross-Site Scripting (XSS) vulnerabilities in SAP Financial ConsolidationEPSS 0.3%CVE-2026-40136MEDIUMDenial of service (DoS) in SAP Financial ConsolidationEPSS 0.3%