CVE-2025-26655: Missing Authorization check in SAP JIT(Outbound)
SAP Just In Time(JIT) does not perform necessary authorization checks for an authenticated user, allowing attacker to escalate privileges that would otherwise be restricted, potentially causing a low impact on the integrity of the application.Confidentiality and Availability are not impacted.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26655?
CVE-2025-26655 is classified as a low severity vulnerability due to its limited impact on integrity.
What are the potential impacts of CVE-2025-26655?
CVE-2025-26655 allows for privilege escalation, which could compromise application integrity.
How do I fix CVE-2025-26655?
To fix CVE-2025-26655, ensure that proper authorization checks are implemented in the SAP Just In Time (JIT) system.
Who is affected by CVE-2025-26655?
CVE-2025-26655 affects users of the SAP Just In Time (JIT) application.
What type of vulnerability is CVE-2025-26655?
CVE-2025-26655 is an authorization vulnerability that allows users to escalate privileges.