sap_hcm_my_timesheet_fiori_2.0_application vulnerabilities
CVEs whose affected-version data names the sap_hcm_my_timesheet_fiori_2.0_application package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-42914Low· 3.1Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in-depth system knowledge to escalate privileges and perform activities that are otherwise restricted, resulting in a l…
▾ SunlitSAP_SE · SAP HCM (My Timesheet Fiori 2.0 application)EPSS 0.22%via CVEORG
CVE-2025-42912Medium· 6.5Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
SAP HCM My Timesheet Fiori 2.0 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This issue has a significant impact on the application's integrity, while confid…
▾ SunlitSAP_SE · SAP HCM (My Timesheet Fiori 2.0 application)EPSS 0.25%via CVEORG