Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_s/4hana_(manage_processing_rules_-_for_bank_statements):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap S/4Hana (Manage Processing Rules For Bank Statements) (9095924e-6baf-5734-9603-33669d4b32d2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-42939 vulnerable 2026-06-08 07:25:08.441383 Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statements)
MEDIUM (4.3)
SAP S/4HANA (Manage Processing Rules - For Bank Statements) allows an authenticated attacker with basic privileges to delete conditions from any shared rule of any user by tampering the request parameter. Due to missing authorization check, the attacker can delete shared rule conditions that should be restricted, compromising the integrity of the application without affecting its confidentiality or availability.
Published: 2025-10-14T00:18:39.026Z
Updated: 2025-10-14T15:26:11.930Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.