Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-42960

Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx Tools

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Business Warehouse and SAP BW/4HANA BEx Tools allow an authenticated attacker to gain higher access levels than intended by exploiting improper authorization checks. This could potentially impact data integrity by allowing deletion of user table entries.�It has no impact on the confidentiality and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business Warehouse and SAP BW/4HANA BEx Tools

Default version status: unaffected

  • DW4CORE 100affected
  • 200affected
  • 300affected
  • 400affected
  • SAP_BW 700affected
  • 701affected
  • 702affected
  • 731affected
  • 740affected
  • 750affected
  • 751affected
  • 752affected
  • 753affected
  • 754affected
  • 755affected
  • 756affected
  • 757affected
  • 758affected
  • 816affected
  • SAP_BW_VIRTUAL_COMP 701affected

References