{"id":"CVE-2025-30016","aliases":["EUVD-2025-10097","GHSA-4wrv-c229-vc5p"],"status":"published","title":"Authentication Bypass Vulnerability in SAP Financial Consolidation","description":"SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the Admin account. The vulnerability arises due to improper authentication mechanisms, due to which there is high impact on the Confidentiality, Integrity \u0026 Availability of the application.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00621,"percentile":0.50244,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-921"],"published":"2025-04-08T07:14:51Z","modified":"2026-06-17T09:08:02Z","products":[{"vendor":"sap se","product":"sap financial consolidation"},{"vendor":"sap_se","product":"sap financial consolidation"}],"references":[{"url":"https://me.sap.com/notes/3572688"},{"url":"https://url.sap/sapsecuritypatchday"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30016"},{"url":"https://github.com/advisories/GHSA-4wrv-c229-vc5p"}],"sources":{"cve":[{"id":"CVE-2025-30016","title":"Authentication Bypass Vulnerability in SAP Financial Consolidation","description":"SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the Admin account. The vulnerability arises due to improper authentication mechanisms, due to which there is high impact on the Confidentiality, Integrity \u0026 Availability of the application.","status":"published","published":"2025-04-08T07:14:51.578Z","modified":"2026-02-26T18:28:42.515Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-921"],"updated_at":"2026-11-02T14:32:35.099955Z"}],"euvd":[{"id":"EUVD-2025-10097","description":"SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the Admin account. The vulnerability arises due to improper authentication mechanisms, due to which there is high impact on the Confidentiality, Integrity \u0026 Availability of the application.","status":"published","published":"2025-04-08T07:14:51Z","modified":"2026-02-26T18:28:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:48:16.990344Z"}],"ghsa":[{"id":"GHSA-4wrv-c229-vc5p","title":"SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the...","description":"SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the Admin account. The vulnerability arises due to improper authentication mechanisms, due to which there is high impact on the Confidentiality, Integrity \u0026 Availability of the application.","status":"published","published":"2025-04-08T09:31:10Z","modified":"2025-04-08T09:31:18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-921"],"updated_at":"2026-11-02T15:00:50.553011Z"}],"nvd":[{"id":"CVE-2025-30016","description":"SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the Admin account. The vulnerability arises due to improper authentication mechanisms, due to which there is high impact on the Confidentiality, Integrity \u0026 Availability of the application.","status":"published","published":"2025-04-08T08:15:17.493Z","modified":"2026-06-17T09:08:02.537Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-921"],"updated_at":"2026-11-02T14:10:59.48027Z"}]}}