← CVE Intelligence

CVE-2025-42952

Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis PUBLISHED

Description (CNA)

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structures, potentially rendering the system unusable. On successful exploitation, an attacker can render the system unusable by triggering short dumps on login. This could cause a high impact on availability. Data confidentiality and integrity are not affected. No data can be read, changed or deleted.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP Business Warehouse and SAP Plug-In Basisaffected PI_BASIS 2006_1_700; affected 701; affected 702; affected 731; affected 740; affected SAP_BW 700; affected 750; affected 751; affected 752; affected 753; affected 754; affected 755; affected 756; affected 757; affected 758; affected 816

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.