CVE-2025-30016
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2025-30016 is a vulnerability affecting SAP Financial Consolidation. This issue grants unauthenticated attackers access to the Admin account, bypassing proper authentication mechanisms. The consequences are significant, as the vulnerability poses a high risk to the Confidentiality, Integrity, and Availability of the application. Attackers could exploit this vulnerability to gain unauthorized control or manipulate financial data, leading to potential financial losses or system compromise. Organizations using SAP Financial Consolidation are strongly advised to apply the necessary patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SAP Financial Consolidation
Affected Vendors
- SAP SE