What is CVE-2025-27430?

CVE-2025-27430 is a low-severity vulnerability in Sap Se Crm And S/4hana (Interaction Center), classified under Server-Side Request Forgery (SSRF). CVSS score: 3.5/10. Published 2025-03-11.

How severe is CVE-2025-27430?

Low severity. CVSS v3 base score is 3.5 out of 10.

SSRF in Sap Se Crm And S/4hana (Interaction Center)

CVE-2025-27430

Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.002 (14.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N.

Affected products

Sap_se Sap Crm And S/4hana (Interaction Center) — versions S4CRM 100, 200, 204

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

Frequently asked questions

What is CVE-2025-27430?: CVE-2025-27430 is a low-severity vulnerability in Sap Se Crm And S/4hana (Interaction Center), classified under Server-Side Request Forgery (SSRF). CVSS score: 3.5/10. Published 2025-03-11.
How severe is CVE-2025-27430?: Low severity. CVSS v3 base score is 3.5 out of 10.