by Kastro
Paper/Archive/CVE-2025-30016

CVE-2025-30016

SAP_SE SAP Financial Consolidation — Authentication Bypass Vulnerability in SAP Financial Consolidation

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 49.2.492 × 209.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the Admin account. The vulnerability arises due to improper authentication mechanisms, due to which there is high impact on the Confidentiality, Integrity & Availability of the application.

Affected

ProductAffectedFixed inSource
SAP Financial ConsolidationFINANCE 1010–CNA

Scores by source

sap (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refme.sap.com/notes/3572688refurl.sap/sapsecuritypatchday