Description
SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Service Parts Management (SPM) | SAP_APPL 600, 602, 603, 604, 605, 606, 616, 617, 618, S4CORE 100, 101, 102 | — |
Advisories 2
- WID-SEC-2025-1002 SAP Patchday Mai 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 13, 2025
- NCSC-2025-0149 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · May 13, 2025