Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-42891

Missing Authorization check in SAP Enterprise Search for ABAP

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Due to a missing authorization check in SAP Enterprise Search for ABAP, an attacker with high privileges may read and export the contents of database tables into an ABAP report. This could lead to a high impact on data confidentiality and a low impact on data integrity. There is no impact on application's availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Enterprise Search for ABAP

Default version status: unaffected

  • SAP_BASIS 752affected
  • SAP_BASIS 753affected
  • SAP_BASIS 754affected
  • SAP_BASIS 755affected
  • SAP_BASIS 756affected
  • SAP_BASIS 757affected
  • SAP_BASIS 758affected
  • SAP_BASIS 816affected

References