Authorization Bypass in Fiori App Manage Payment Blocks by SAP

CVE-2025-42915

What is CVE-2025-42915?

The Fiori app Manage Payment Blocks by SAP is vulnerable due to the lack of adequate authorization checks. This flaw allows users with basic privileges to access functionalities that should be restricted to higher-privileged user groups. As a result, this vulnerability poses risks to both the confidentiality and integrity of sensitive information within the application, while not affecting its overall availability. Organizations using this app need to implement necessary security measures to ensure proper access controls are enforced.

References