CVE-2025-42876 - Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Le...

CVE ID : CVE-2025-42876 Published : Dec. 9, 2025, 2:14 a.m. | 2 hours, 3 minutes ago Description : Due to a Missing Authorization Check vulnerability in SAP S/4 HANA Private Cloud (Financials General Ledger), an authenticated attacker with authorization limited to a single company code could read sensitive data and post or modify documents across all company codes. Successful exploitation could result in a high impact to confidentiality and a low impact to integrity, while availability remains unaffected. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor