PT-2025-36548 · Sap · Fiori App Manage Payment Blocks

Published 2025-09-09 · Updated 2025-09-09 · CVE-2025-42915

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Fiori app Manage Payment Blocks (affected versions not specified)

Description: The Fiori app Manage Payment Blocks does not perform the necessary authorization checks. This allows an attacker with basic user privileges to abuse functionalities restricted to specific user groups, potentially impacting the confidentiality and integrity of the application.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-42915

Affected Products

Fiori App Manage Payment Blocks

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-42915 · Security Note
• https://t.me/CVEtracker/32020 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1965315574960972181 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/1965244301182415034 · Twitter Post
• https://me.sap.com/notes/3409013 · Note