Riskcovery

CVE-2025-43011

Missing Authorization Check in SAP Landscape Transformation (PCL Basis)

State
Published
Severity
7.7 High
Published
May 13, 2025
Updated
May 13, 2025
Reserved
Apr 16, 2025

Read the record on cve.org

Description

Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availability of the application.

Scores

CVSSScoreVectorSource
3.17.7 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:Nsap

Weaknesses

Affected Products

ProductVersions
SAP Landscape Transformation (PCL Basis)SAP_SE
  • DMIS 2011_1_700Affected
  • 2011_1_710Affected
  • 2011_1_730Affected
  • 2011_1_731Affected
  • 2018_1_752Affected
  • 2020Affected
  • S4CORE 102Affected
  • 103Affected
  • 104Affected
  • 105Affected
  • 106Affected
  • 107Affected
  • 108Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.