CVE-2025-43000 — Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW)

CVE-2025-43000

Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW) PUBLISHED

Description (CNA)

Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwise be restricted.This has High impact on Confidentiality with Low impact on Integrity and Availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Business Objects Business Intelligence Platform (PMW)	affected ENTERPRISE 430; affected 2025; affected 2027

CWE

CWE-862

References

https://me.sap.com/notes/3586013
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.