SAP Note 3656781
User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management
MediumCVSS 4.3SAP Financial Service Claims Management
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
- CVE(s)
- CVE-2025-42903
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products and versions
- Product SAP Financial Service Claims Management
Versions: INSURANCE 803, 804, 805, 806, S4CEXT 107, 108, 109
Appears in
Patch Days listing this note, newest first.
- October 2025MediumCVSS 4.3