CVE-2025-42914 Details

A privilege escalation vulnerability has been identified in the SAP HCM My Timesheet Fiori 2.0 application. This issue arises from inadequate authorization checks, allowing an authenticated attacker with extensive system knowledge to gain elevated privileges and perform restricted actions. While this vulnerability has a low impact on the application's integrity, it does not affect confidentiality or availability.

Users are advised to review and implement the SAP Security Note associated with this vulnerability. This can be done through the SAP for Me platform, specifically in the Security Notes section. For guidance on accessing and applying SAP Security Notes, refer to the SAP Security Notes FAQs.