CVE-2025-26660 Broken Access Control in SAP Fiori apps (Posting Library)

SAP Fiori applications using the posting library fail to properly configure security settings during the setup process, leaving them at default or inadequately defined. This vulnerability allows an attacker with low privileges to bypass access controls within the application, enabling them to...

CVE-2025-26660: Authorization Bypass Through User-Controlled Key

SAP Fiori applications using the posting library fail to properly configure security settings during the setup process, leaving them at default or inadequately defined. This vulnerability allows an attacker with low privileges to bypass access controls within the application, enabling them to...

PT-2025-10674

Name of the Vulnerable Software and Affected Versions SAP Fiori affected versions not specified Description The issue arises from inadequate security settings configuration during the setup process of SAP Fiori applications that utilize the posting library. This allows an attacker with low...