SAP Note 3561861
Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center)
LowCVSS 3.5SAP CRM and SAP S/4HANA
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2025-27430
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
Affected products and versions
- Product SAP CRM and SAP S/4HANA (Interaction Center)
Versions: S4CRM 100, 200, 204, 205, 206, S4FND 102, 103, 104, 105, 106, 107, 108, S4CEXT 107, BBPCRM 701, 702, 712, 713, 714, WEBCUIF 701, 731, 746, 747, 748, 800, 801
Appears in
Patch Days listing this note, newest first.
- March 2025LowCVSS 3.5