Privilege Escalation Vulnerability in SAP S4CORE Affecting Journal Entries

CVE-2025-42899

What is CVE-2025-42899?

A vulnerability in SAP S4CORE (Manage journal entries) allows authenticated users to bypass certain authorization checks. This flaw can lead to unauthorized privilege escalation, potentially enabling users to perform actions beyond their intended permissions, although it does not compromise the confidentiality, integrity, or availability of the application. It is crucial for organizations using this product to apply relevant security patches and monitor for updates to maintain secure operations.

References