What’s Vulnerable › Vulnerabilities
CVE-2025-25241: Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests)
- Severity: medium (CVSS 5.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-02-11 · updated 2026-06-17
- Weakness: CWE-862
Description
Due to a missing authorization check, an attacker who is logged in to application can view/ delete �My Overtime Requests� which could allow the attacker to access employee information. This leads to low impact on confidentiality, integrity of the application. There is no impact on availability.
Affected products
References
Get alerted when CVE-2025-25241 or the next vulnerability affects your stack