4.3
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
Due to insufficient CSRF protection in SAP Fiori App Manage Work Center Groups, an authenticated user could be tricked by an attacker to send unintended request to the web server. This has low impact on integrity and no impact on confidentiality and availability of the application.
Basic Information
ID
CVE-2025-42923
Source
sap
Published
Sep 9, 2025 at 02:09
Affected Product
Vendor
SAP_SE
Product
SAP Fiori App (F4044 Manage Work Center Groups)
Version
UIS4HOP1 600
Affected Versions
SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) UIS4HOP1 600
SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) 700
SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) 800
SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) 900
SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) 700
SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) 800
SAP_SE SAP Fiori App (F4044 Manage Work Center Groups) 900