Authorization Flaw in SAP Manage Processing Rules for Bank Statement

CVE-2025-42987

What is CVE-2025-42987?

The vulnerability in SAP Manage Processing Rules allows an attacker with minimal privileges to manipulate shared processing rules. By exploiting a lack of proper authorization checks, the attacker can gain unauthorized access to edit critical rules that should be protected. This undermines the application's integrity, potentially leading to unauthorized transactions or data manipulation. Organizations using this product should take immediate steps to assess and mitigate the risks associated with this security flaw.

References