CVE-2025-42929 — Missing input validation vulnerability in SAP Landscape Transformation Replication Server

CVE-2025-42929

Missing input validation vulnerability in SAP Landscape Transformation Replication Server PUBLISHED

Description (CNA)

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Landscape Transformation Replication Server	affected DMIS 2011_1_620; affected 2011_1_640; affected 2011_1_700; affected 2011_1_710; affected 2011_1_730; affected 2011_1_731; affected 2011_1_752; affected 2020

CWE

CWE-1287

References

https://me.sap.com/notes/3633002
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.