Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_hcm_(my_timesheet_fiori_2.0_application):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Hcm (My Timesheet Fiori 2.0 Application) (29d7fa47-8972-5023-9455-cde5153a2e7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-42914 vulnerable 2026-06-08 07:25:08.410528 Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
LOW (3.1)
Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integrity of the application. Confidentiality and availability are not impacted.
Published: 2025-09-09T02:06:24.347Z
Updated: 2026-02-26T17:49:07.244Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-42913 vulnerable 2026-06-08 07:25:08.410297 Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
LOW (3.1)
Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a low impact on the integrity of the application. Confidentiality and availability are not impacted.
Published: 2025-09-09T02:06:16.378Z
Updated: 2026-02-26T17:49:07.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-42912 vulnerable 2026-06-08 07:25:08.410019 Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
MEDIUM (6.5)
SAP HCM My Timesheet Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected.
Published: 2025-09-09T02:06:08.163Z
Updated: 2026-02-26T17:49:07.724Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.