Authorization Vulnerability in SAP S/4HANA Manage Central Purchase Contract

CVE-2025-42984

What is CVE-2025-42984?

A security flaw exists in SAP S/4HANA Manage Central Purchase Contract where necessary authorization checks are not enforced for authenticated users. This weakness allows an attacker to execute function imports on the affected entities, potentially leading to unauthorized alterations and actions being performed. Although this vulnerability has implications for data access, its impact on the overall confidentiality and availability of the application is limited.

References