PT-2025-6135 · Sap · Sap Fiori Apps Reference Library

Published 2025-02-11 · Updated 2025-02-12 · CVE-2025-25241

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: SAP Fiori Apps Reference Library (My Overtime Requests) (affected versions not specified)

Description: The issue is caused by a missing authorization check, allowing an attacker who is logged in to the application to view or delete 'My Overtime Requests'. This could enable the attacker to access employee information, resulting in a low impact on the confidentiality and integrity of the application. There is no impact on availability.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-25241

Affected Products

Sap Fiori Apps Reference Library

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-25241 · Security Note
• https://t.me/cvedetector/17618 · Telegram Post
• https://twitter.com/CVEnew/status/1889116918499491871 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/cybercronai/status/1889664639144755255 · Twitter Post
• https://me.sap.com/notes/3532025 · Note