CVE-2025-42876

Name of the Vulnerable Software and Affected Versions SAP S/4 HANA Private Cloud (Financials General Ledger) (affected versions not specified)

Description A missing authorization check exists in SAP S/4 HANA Private Cloud (Financials General Ledger). An authenticated attacker with limited authorization to a single company code can read sensitive data and create or modify documents across all company codes. This could lead to a high impact on data confidentiality and a low impact on data integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.