CVE-2025-42983 — Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

Description (CNA)

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any data.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Business Warehouse and SAP Plug-In Basis	affected PI_BASIS 2006_1_700; affected 701; affected 702; affected 731; affected 740; affected SAP_BW 750; affected 751; affected 752; affected 753; affected 754; affected 755; affected 756; affected 757; affected 758; affected 914; affected 915

CWE

CWE-862

References

https://me.sap.com/notes/3606484
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.