CVE-2025-42912 Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)

SAP HCM My Timesheet Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected...

CVE-2025-42912

The CVE-2025-42912 issue affects SAP HCM My Timesheet Fiori 2.0, where an authenticated user can escalate privileges due to missing authorization checks in the application. The root cause is lack of proper authorization validation within the Timesheet Fiori 2.0 component, leading to integrity imp...

SAP HCM Travel Management 安全漏洞

SAP HCM Travel Management is a travel management module from SAP Germany. A security vulnerability exists in HCM Travel Management Fiori Apps V2 608, which stems from a failure to perform proper authorization checks and can be exploited by an attacker to read an employee's personnel number,...