Riskcovery

CVE-2025-27430

Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)

State
Published
Severity
3.5 Low
Published
Mar 11, 2025
Updated
Mar 11, 2025
Reserved
Feb 25, 2025

Read the record on cve.org

Description

Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability

Scores

CVSSScoreVectorSource
3.13.5 LowCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:Nsap

Weaknesses

  • CWE-918 Server-Side Request Forgery (SSRF)

Affected Products

ProductVersions
SAP CRM and SAP S/4HANA (Interaction Center)SAP_SE
  • S4CRM 100Affected
  • 200Affected
  • 204Affected
  • 205Affected
  • 206Affected
  • S4FND 102Affected
  • 103Affected
  • 104Affected
  • 105Affected
  • 106Affected
  • 107Affected
  • 108Affected
  • S4CEXT 107Affected
  • BBPCRM 701Affected
  • 702Affected
  • 712Affected
  • 713Affected
  • 714Affected
  • WEBCUIF 701Affected
  • 731Affected
  • 746Affected
  • 747Affected
  • 748Affected
  • 800Affected
  • 801Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.