Privilege Escalation Vulnerability in SAP HCM My Timesheet Fiori Application

CVE-2025-42913

What is CVE-2025-42913?

The SAP HCM My Timesheet Fiori application is susceptible to a privilege escalation vulnerability caused by inadequate authorization checks. This allows an authenticated user with advanced knowledge of the system to gain unauthorized access to restricted functionalities. Despite the low impact on application integrity, it raises significant concerns regarding operational security and highlights the importance of robust authorization mechanisms in enterprise applications.

References