Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-42930

Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Business Planning and Consolidation allows an authenticated standard user to call a function module by crafting specific parameters that causes a loop, consuming excessive resources and resulting in system unavailability. This leads to high impact on the availability of the application, there is no impact on confidentiality or integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business Planning and Consolidation

Default version status: unaffected

  • BPC4HANA 200affected
  • 300affected
  • SAP_BW 750affected
  • 751affected
  • 752affected
  • 753affected
  • 754affected
  • 755affected
  • 756affected
  • 757affected
  • 758affected
  • 816affected
  • 914affected
  • CPMBPC 810affected

References