A vulnerability in SAP Financial Service Claims Management RFC function ICL_USER_GET_NAME_AND_ADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 14 Oct 2025 00:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability in SAP Financial Service Claims Management RFC function ICL_USER_GET_NAME_AND_ADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability. | |
| Title | User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management | |
| Weaknesses | CWE-204 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: sap
Published:
Updated: 2025-10-14T00:17:39.686Z
Reserved: 2025-04-16T13:25:25.736Z
Link: CVE-2025-42903
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-10-14T01:15:32.137
Modified: 2025-10-14T01:15:32.137
Link: CVE-2025-42903
Redhat
No data.
OpenCVE Enrichment
No data.