CVE-2025-43002
Medium
Description
SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted.
SeverityMedium
CVSS4.3
Exploit probability—
ProductSAP S4/HANA (OData meta-data property)
PublishedMay 13, 2025
First seenMay 13, 2025
Weakness typeCWE-472CWE-472
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SAP_SE SAP S4/HANA (OData meta-data property) | S4CORE 102, 103, 104, 105, 106 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.