CVE-2025-27430
CVSS 3.1 Score 3.5 of 10 (low)
Details
Published Mar 11, 2025
CWE ID 918
Summary
CVE-2025-27430 is a newly discovered vulnerability in SAP CRM and SAP S/4HANA (Interaction Center). This issue allows a low-privileged attacker to conduct Server-Side Request Forgery (SSRF) attacks, giving them access to restricted internal network resources. Consequently, the confidentiality of the affected applications may be compromised without impacting their integrity or availability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.