AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-43010

HIGH · CVSS 8.3 EPSS 0.44%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-05-13 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.3. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.

CVE
CVE-2025-43010
Severity
HIGH
CVSS
8.3
EPSS
0.44%

Original NVD Description

SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs, including SAP standard programs. This is due to lack of input validation and no authorization checks. This has low Confidentiality impact but high impact on integrity and availability to the application.