CVE-2025-27436: falha de média gravidade em SAP_SE SAP S/4HANA (Manage Bank Statements)
Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.2%
The Manage Bank Statements in SAP S/4HANA does not perform required access control checks for an authenticated user to confirm whether a request to interact with a resource is legitimate, allowing the attacker to delete the attachment of a posted bank statement. This leads to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
SAP_SE · SAP S/4HANA (Manage Bank Statements)CVEs relacionadas — SAP_SE SAP S/4HANA (Manage Bank Statements)
No mesmo produto, das mais perigosas para as menos.