CVE-2025-42915Active Exploitation

LOWCVSS 5.4 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without affecting the availability.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

Active exploitation appears in 1 classified signals
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Active Exploitation

1100.0%

Referenced assets1 URL

By indicator

https://vuldb.com/vuln/323155/cti

Full discourse1 post

VulDB 🛡@vuldb92d
Active Exploitation
Our CTI team identified a lot of activities targeting SAP Fiori app (CVE-2025-42915) https://vuldb.com/vuln/323155/cti
Post summary
CTI analysts report widespread activity against SAP Fiori app CVE‑2025‑42915, indicating the vulnerability is being exploited in the wild.
0000087
2.3K followersView on X

Explore more

Back to dashboard