What’s Vulnerable › Vulnerabilities
CVE-2025-43011: Missing Authorization Check in SAP Landscape Transformation (PCL Basis)
- Severity: high (CVSS 7.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-05-13 · updated 2026-06-17
- Weakness: CWE-862
Description
Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availability of the application.
Affected products
- SAP_SE SAP Landscape Transformation (PCL Basis): DMIS 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2018_1_752, 2020 (+7)
References
Get alerted when CVE-2025-43011 or the next vulnerability affects your stack