CVE-2025-42987

🗓️ 10 Jun 2025 00:11:45Reported by sapType

Missing authorization check in SAP S/4HANA allows unauthorized rule edits by attackers.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-42987	10 Jun 202503:23	–	circl
CNNVD	SAP Manage Processing Rules 安全漏洞	10 Jun 202500:00	–	cnnvd
CNVD	SAP Manage Processing Rules Authorization Issues Vulnerability	23 Jun 202500:00	–	cnvd
Cvelist	CVE-2025-42987 Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement)	10 Jun 202500:11	–	cvelist
EUVD	EUVD-2025-17601	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in SAP Products	10 Jun 202510:15	–	ncsc
NVD	CVE-2025-42987	10 Jun 202501:15	–	nvd
Positive Technologies	PT-2025-24589 · Sap · Sap Manage Processing Rules	10 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-42987	12 Jun 202500:18	–	redhatcve
Vulnrichment	CVE-2025-42987 Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement)	10 Jun 202500:11	–	vulnrichment

Vulners

Node

sap s4coreMatch104

sap s/4hanaMatch105

sap s/4hanaMatch106

sap s/4hanaMatch107

sap s/4hanaMatch108

[
  {
    "defaultStatus": "unaffected",
    "product": "SAP S/4HANA (Manage Processing Rules - For Bank Statement)",
    "vendor": "SAP_SE",
    "versions": [
      {
        "status": "affected",
        "version": "S4CORE 104"
      },
      {
        "status": "affected",
        "version": "105"
      },
      {
        "status": "affected",
        "version": "106"
      },
      {
        "status": "affected",
        "version": "107"
      },
      {
        "status": "affected",
        "version": "108"
      }
    ]
  }
]

Source	Link
url	www.url.sap/sapsecuritypatchday
me	www.me.sap.com/notes/3596850

15 Apr 2026 00:35Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.14.3

EPSS0.00168

SSVC

CWE-862