CVE-2025-42917: SAP SE SAP Hcm Approve Timesheets Fiori 2.0 Application

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

SAP HCM Approve Timesheets Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confidentiality and availability remain unaffected.

Affected products

• SAP SE SAP Hcm Approve Timesheets Fiori 2.0 Application

Published 2025-09-09. Last modified 2026-06-17.