CVE-2025-42983

Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

State: Published
Severity: 8.5 High
Published: Jun 10, 2025
Updated: Jun 10, 2025
Reserved: Apr 16, 2025

Description

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any data.

Scores

CVSS	Score	Vector	Source
3.1	8.5 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H	sap

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
SAP Business Warehouse and SAP Plug-In BasisSAP_SE	PI_BASIS 2006_1_700Affected 701Affected 702Affected 731Affected 740Affected SAP_BW 750Affected 751Affected 752Affected 753Affected 754Affected 755Affected 756Affected 757Affected 758Affected 914Affected 915Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.