Privilege Escalation Vulnerability in SAP HCM My Timesheet Fiori Application

CVE-2025-42914

What is CVE-2025-42914?

An identified issue in the SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with extensive system knowledge to bypass authorization checks. This vulnerability permits the escalation of privileges, granting unauthorized access to restricted functionalities, thereby compromising the integrity of the application. Although the overall impact on confidentiality and availability is limited, it poses potential risks if exploited. Regular patch management and system audits are advisable to mitigate such vulnerabilities.

References