VULNERABILITY INTELLIGENCE

CVE-2025-42923

CVSS score4.3 MEDIUM

EPSS probability0.15%

CISA KEVNot currently listed

Published2025-09-09

Last modified2026-06-17

Description

Due to insufficient CSRF protection in SAP Fiori App Manage Work Center Groups, an authenticated user could be tricked by an attacker to send unintended request to the web server. This has low impact on integrity and no impact on confidentiality and availability of the application.