CISA-2025-26655 — Vulnetix

CISA-2025-26655 PUBLISHED CVSS 3.1 LOW

Reported by sap · Published March 11, 2025

SAP Just In Time(JIT) does not perform necessary authorization checks for an authenticated user, allowing attacker to escalate privileges that would otherwise be restricted, potentially causing a low impact on the integrity of the application.Confidentiality and Availability are not impacted.

Risk Scores

CVSS 3.1

3.1

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected Products

Vendor	Product	Versions
SAP_SE	SAP Just In Time	S4CORE 102, 103, 104
SAP_SE	SAP Just In Time	S4CORE 102, 103, 104

Timeline

Mar 11, 2025 CVE Published
Mar 11, 2025 CVE Updated

References

Open in Interactive Console →