PT-2025-15374 · Sap · Sap Financial Consolidation

Published 2025-04-08 · Updated 2025-04-17 · CVE-2025-30016

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SAP Financial Consolidation (affected versions not specified)

Description: The issue arises due to improper authentication mechanisms, allowing an unauthenticated attacker to gain unauthorized access to the Admin account. This has a high impact on the Confidentiality, Integrity, and Availability of the application.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-921

Related Identifiers

BDU:2025-06361

CVE-2025-30016

Affected Products

Sap Financial Consolidation

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2025-30016 · Security Note
• https://bdu.fstec.ru/vul/2025-06361 · Security Note
• https://reddit.com/r/pwnhub/comments/1juh1j7/sap_issues_critical_security_patches_for_major · Reddit Post
• https://twitter.com/CVEnew/status/1909528291863937373 · Twitter Post
• https://twitter.com/cybercronai/status/1909599770777203133 · Twitter Post
• https://me.sap.com/notes/3572688 · Note
• https://t.me/cvetracker/21097 · Telegram Post
• https://t.me/cvedetector/22420 · Telegram Post
• https://twitter.com/UjlakiMarci/status/1909707634284155173 · Twitter Post
• https://twitter.com/vulns_space/status/1912723581856842077 · Twitter Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/april-2025.html · Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CyberWatch_News/status/1910268277621653532 · Twitter Post
• https://twitter.com/vulns_space/status/1909532182999097403 · Twitter Post
• https://twitter.com/Carlos_LopezMkt/status/1909533577718517867 · Twitter Post