What is CVE-2025-43003?

CVE-2025-43003 is a medium-severity vulnerability in Sap_se Sap S/4hana (Private Cloud & On-premise), classified under CWE-749. CVSS score: 6.4/10. Published 2025-05-13.

How severe is CVE-2025-43003?

Medium severity. CVSS v3 base score is 6.4 out of 10.

Vulnerability in Sap_se Sap S/4hana (Private Cloud & On-premise)

CVE-2025-43003

SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access and create a custom UI layout displaying this field. On performing this step the attacker could gain access to highly sen…

EPSS: 0.003 (18.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L.

Affected products

Sap_se Sap S/4hana (Private Cloud & On-premise) — versions S4CRM 204, 205, 206

Weakness classification (CWE)

CWE-749

References

cna@sap.com
cna@sap.com

Frequently asked questions

What is CVE-2025-43003?: CVE-2025-43003 is a medium-severity vulnerability in Sap_se Sap S/4hana (Private Cloud & On-premise), classified under CWE-749. CVSS score: 6.4/10. Published 2025-05-13.
How severe is CVE-2025-43003?: Medium severity. CVSS v3 base score is 6.4 out of 10.