What is CVE-2025-42923?

CVE-2025-42923 is a medium-severity vulnerability in Sap_se Sap Fiori App (F4044 Manage Work Center Groups), classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.3/10. Published 2025-09-09.

How severe is CVE-2025-42923?

Medium severity. CVSS v3 base score is 4.3 out of 10.

CSRF in Sap_se Sap Fiori App (F4044 Manage Work Center Groups)

CVE-2025-42923

Due to insufficient CSRF protection in SAP Fiori App Manage Work Center Groups, an authenticated user could be tricked by an attacker to send unintended request to the web server. This has low impact on integrity and no impact on confident…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.001 (2.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Sap_se Sap Fiori App (F4044 Manage Work Center Groups) — versions UIS4HOP1 600, 700, 800

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

Frequently asked questions

What is CVE-2025-42923?: CVE-2025-42923 is a medium-severity vulnerability in Sap_se Sap Fiori App (F4044 Manage Work Center Groups), classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.3/10. Published 2025-09-09.
How severe is CVE-2025-42923?: Medium severity. CVSS v3 base score is 4.3 out of 10.