CVE-2025-27433 — Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)
The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reversed bank state…
Published: 2025-03-11 · CVSS: 4.3 · CVSS 3.1
The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reversed bank statement. This vulnerability has a low impact on the application's integrity, with no effect on confidentiality and availability of the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7