Description
A vulnerability in SAP Financial Service Claims Management RFC function ICL_USER_GET_NAME_AND_ADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Financial Service Claims Management | INSURANCE 803, 804, 805, 806, S4CEXT 107, 108, 109 | — |
Advisories 2
- NCSC-2025-0323 Kwetsbaarheden verholpen in SAP Producten NCSC-NL (Netherlands) · Oct 17, 2025
- WID-SEC-2025-2265 SAP Patchday Oktober 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 13, 2025