CVE-2025-25241 — Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests)
Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee infor…
Published: 2025-02-11 · CVSS: 5.4 · CVSS 3.1
Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7