CVE 4.3 MEDIUM

Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups)_CVE-2025-42923

4.3 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

Due to insufficient CSRF protection in SAP Fiori App Manage Work Center Groups, an authenticated user could be tricked by an attacker to send unintended request to the web server. This has low impact on integrity and no impact on confidentiality and availability of the application.

Basic Information

ID CVE-2025-42923
Source sap
Published Sep 9, 2025 at 02:09

Affected Product

Vendor SAP_SE
Product SAP Fiori App (F4044 Manage Work Center Groups)
Version UIS4HOP1 600
Affected Versions SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) UIS4HOP1 600
SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) 700
SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) 800
SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) 900

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.