cveboard RSS feed

CVE-2025-42903

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management

A vulnerability in SAP Financial Service Claims Management RFC function ICL_USER_GET_NAME_AND_ADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SAP Financial Service Claims Management

Vendor
SAP_SE
Product
SAP Financial Service Claims Management
Platforms
Unknown
Default status
unaffected
SAP Financial Service Claims Management · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
INSURANCE 803affectedUnavailableUnavailableUnavailableNone listed
804affectedUnavailableUnavailableUnavailableNone listed
805affectedUnavailableUnavailableUnavailableNone listed
806affectedUnavailableUnavailableUnavailableNone listed
S4CEXT 107affectedUnavailableUnavailableUnavailableNone listed
108affectedUnavailableUnavailableUnavailableNone listed
109affectedUnavailableUnavailableUnavailableNone listed