SAP HCM
4 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| September 2025 | 3635587 | Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application) | Medium | 6.5 |
| September 2025 | 3643832 | Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application) | Medium | 6.5 |
| December 2024 | 3522332 | Missing Authorization check in SAP HCM (Approve Timesheets version 4) | Medium | 4.3 |
| December 2023 | 3217087 | Cross-Site Scripting (XSS) vulnerability in the SAP HCM (SMART PAYE solution) | Medium | 6.1 |