PT-2025-36554 · Sap · Sap Fiori App Manage Work Center Groups

Published 2025-09-09 · Updated 2025-09-09 · CVE-2025-42923

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: SAP Fiori App Manage Work Center Groups (affected versions not specified)

Description: Insufficient Cross-Site Request Forgery (CSRF) protection exists in SAP Fiori App Manage Work Center Groups, potentially allowing an authenticated user to be tricked into sending unintended requests to the web server. This could compromise the integrity of the application.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-42923

Affected Products

Sap Fiori App Manage Work Center Groups

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-42923 · Security Note
• https://t.me/CVEtracker/32026 · Telegram Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/VulmonFeeds/status/1965295098284872130 · Twitter Post
• https://twitter.com/CVEnew/status/1965244294207295554 · Twitter Post
• https://me.sap.com/notes/3450692 · Note