Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-27433 EUVD-2025-7778GHSA-h4p3-cg85-78c7

Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements)

Published Mar 11, 2025 · Updated Mar 11, 2025 · Assigned by sap

Description

The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of the application and upload files to a reversed bank statement. This vulnerability has a low impact on the application's integrity, with no effect on confidentiality and availability of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP S/4HANA (Manage Bank Statements) S4CORE 107, 108 —

Advisories 2

References