CVE-2025-23188: SAP SE SAP s/4hana Rbd

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

An authenticated user with low privileges can exploit a missing authorization check in an IBS module of FS-RBD, allowing unauthorized access to perform actions beyond their intended permissions. This causes a low impact on integrity with no impact on confidentiality and availability.

Affected products

• SAP SE SAP s/4hana Rbd: version S4CORE 102 only; version 103 only; version 104 only; version 105 only; version 106 only; version 107 only; …

Published 2025-03-11. Last modified 2026-06-17.