Sap S/4Hana (Enterprise Event Enablement)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_s/4hana_(enterprise_event_enablement):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap S/4Hana (Enterprise Event Enablement) (696d1601-11fe-5e2f-bbb5-2dea421c5745) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-42993 |
vulnerable | 2026-06-08 07:25:08.521082 |
Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement)
MEDIUM (6.7)
Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration could create an RFC destination and assign an arbitrary high-privilege user. This allows the attacker to consume events via the RFC destination, leading to code execution under the privileges of the assigned high-privilege user. While the vulnerability has a low impact on Availability, it significantly poses a high risk to both Confidentiality and Integrity.
Published: 2025-06-10T00:13:15.633Z
Updated: 2026-02-26T17:51:05.634Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.