Unauthorized Access Vulnerability in SAP Electronic Invoicing for Brazil

CVE-2025-27432

What is CVE-2025-27432?

The eDocument Cockpit in SAP Electronic Invoicing for Brazil has a vulnerability that allows an authenticated attacker with specific privileges to access transactions without authorization. By utilizing a particular ABAP method, the attacker can retrieve inbound delivery details, compromising the confidentiality of certain information. This issue does not affect the integrity or availability of the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References