CVE-2025-27430
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)
Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP CRM and SAP S/4HANA (Interaction Center)
- Vendor
- SAP_SE
- Product
- SAP CRM and SAP S/4HANA (Interaction Center)
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| S4CRM 100 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 200 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 204 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 205 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 206 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4FND 102 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 103 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 104 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 105 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 106 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 107 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 108 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4CEXT 107 | affected | Unavailable | Unavailable | Unavailable | None listed |
| BBPCRM 701 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 702 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 712 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 713 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 714 | affected | Unavailable | Unavailable | Unavailable | None listed |
| WEBCUIF 701 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 731 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 746 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 747 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 748 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 800 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 801 | affected | Unavailable | Unavailable | Unavailable | None listed |