CVE-2025-42929

Missing input validation vulnerability in SAP Landscape Transformation Replication Server

State: Published
Severity: 8.1 High
Published: Sep 9, 2025
Updated: Sep 9, 2025
Reserved: Apr 16, 2025

Description

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H	sap

Weaknesses

CWE-1287 Improper Validation of Specified Type of Input

Affected Products

Product	Versions
SAP Landscape Transformation Replication ServerSAP_SE	DMIS 2011_1_620Affected 2011_1_640Affected 2011_1_700Affected 2011_1_710Affected 2011_1_730Affected 2011_1_731Affected 2011_1_752Affected 2020Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.