CVE-2025-27432
CVSS 3.1 Score 2.4 of 10 (low)
Details
Published Mar 11, 2025
CWE ID 862
Summary
CVE-2025-27432 is a vulnerability affecting the eDocument Cockpit (Inbound NF-e) in SAP Electronic Invoicing for Brazil. An authenticated attacker with specific privileges can exploit this issue by executing a particular ABAP method within the ABAP system. This action enables unauthorized access to each transaction, allowing the attacker to view inbound delivery details. Despite the potential for confidential information disclosure, the vulnerability does not impact the integrity or availability of the application.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.