PT-2025-10676 · Sap · Sap Crm+1

Published 2025-03-11 · Updated 2025-03-11 · CVE-2025-27430

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP CRM and SAP S/4HANA (Interaction Center) (affected versions not specified)

Description The issue allows an attacker with low privileges to access restricted information under certain conditions. This is due to an SSRF flaw that enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2025-06264

CVE-2025-27430

Affected Products

Sap Crm

Sap S/4Hana

References · 7

• https://bdu.fstec.ru/vul/2025-06264 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-27430 · Security Note
• https://me.sap.com/notes/3561861 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://t.me/cvetracker/18874 · Telegram Post
• https://t.me/cvedetector/20007 · Telegram Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2025.html · Note