CVE-2025-43008
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal
Due to missing authorization check, an unauthorized user can view the files of other company. This might lead to disclosure of personal data of employees. There is no impact on integrity and availability.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal
- Vendor
- SAP_SE
- Product
- SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| S4HCMCPT 100 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 101 | affected | Unavailable | Unavailable | Unavailable | None listed |
| SAP_HRCPT 600 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 604 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 608 | affected | Unavailable | Unavailable | Unavailable | None listed |