Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-42983

Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Business Warehouse and SAP Plug-In Basis

Default version status: unaffected

  • PI_BASIS 2006_1_700affected
  • 701affected
  • 702affected
  • 731affected
  • 740affected
  • SAP_BW 750affected
  • 751affected
  • 752affected
  • 753affected
  • 754affected
  • 755affected
  • 756affected
  • 757affected
  • 758affected
  • 914affected
  • 915affected

References