Vulnerability details
CVE-2025-42952
SAP_SE SAP Business Warehouse and SAP Plug-In Basis
Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis
CVSS 3.1
7.7High
Official description
SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structures, potentially rendering the system unusable. On successful exploitation, an attacker can render the system unusable by triggering short dumps on login. This could cause a high impact on availability. Data confidentiality and integrity are not affected. No data can be read, changed or deleted.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.7High | 3.1 | CVEProject cvelistV5 (CNA) (sap) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 701 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 702 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 731 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 740 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 750 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 751 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 752 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 753 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 754 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 755 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 756 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 757 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 758 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | 816 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | PI_BASIS 2006_1_700 | CVEProject cvelistV5 (CNA) |
| SAP_SE | SAP Business Warehouse and SAP Plug-In Basis | SAP_BW 700 | CVEProject cvelistV5 (CNA) |
References and advisories
2
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-07-08
- Last updated
- 2025-07-08
- State
- Published
- Assigner (CNA)
- sap
Exploit prediction (EPSS)
0.42%
Probability of exploitation in 30 days
37.3%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-862Missing Authorization