Vulnerability Bulletins

CVE-2025-42903

   
Affected software SAP
 
A vulnerability in SAP Financial Service Claims Management RFC function ICL_USER_GET_NAME_AND_ADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-42903