CVE-2025-43008

Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal

State: Published
Severity: 5.8 Medium
Published: May 13, 2025
Updated: May 13, 2025
Reserved: Apr 16, 2025

Description

Due to missing authorization check, an unauthorized user can view the files of other company. This might lead to disclosure of personal data of employees. There is no impact on integrity and availability.

Scores

CVSS	Score	Vector	Source
3.1	5.8 Medium	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N	sap

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
SAP S/4HANA HCM Portugal and SAP ERP HCM PortugalSAP_SE	S4HCMCPT 100Affected 101Affected SAP_HRCPT 600Affected 604Affected 608Affected

References

https://me.sap.com/notes/3585992
https://url.sap/sapsecuritypatchday

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.