CVE-2025-43002 — Missing Authorization check in SAP S4/HANA (OData meta-data property)
SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confid…
Published: 2025-05-13 · CVSS: 4.3 · CVSS 3.1
SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7