CVE-2025-42930 — Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation

Description (CNA)

SAP Business Planning and Consolidation allows an authenticated standard user to call a function module by crafting specific parameters that causes a loop, consuming excessive resources and resulting in system unavailability. This leads to high impact on the availability of the application, there is no impact on confidentiality or integrity.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Business Planning and Consolidation	affected BPC4HANA 200; affected 300; affected SAP_BW 750; affected 751; affected 752; affected 753; affected 754; affected 755; affected 756; affected 757; affected 758; affected 816; affected 914; affected CPMBPC 810

CWE

CWE-606

References

https://me.sap.com/notes/3614067
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.