Medium severity5.4NVD Advisory· Published Sep 9, 2025· Updated Jun 17, 2026

CVE-2025-42915

Description

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without affecting the availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/Fiori app Manage Payment Blocksllm-create

Patches

Vulnerability mechanics

References

me.sap.com/notes/3409013nvd
url.sap/sapsecuritypatchdaynvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000