CVE-2019-0325

CVE-2019-0325 is an authorization bypass vulnerability affecting SAP ERP HCM (SAP_HRCES) version 3. It allows a user whose payroll data access was revoked to potentially retain access due to insufficient authorization checks on a specific report. This medium-severity vulnerability has a CVSS score of 4.2, indicating a network attack vector with high attack complexity, low privileges required, and resulting in low confidentiality and integrity impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has received some community discussion and media coverage.