VULNERABILITY INTELLIGENCE

CVE-2025-43009

CVSS score6.3 MEDIUM

EPSS probability0.26%

CISA KEVNot currently listed

Published2025-05-13

Last modified2026-06-17

Description

SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application.