8.1
CVE-2025-42929
- EPSS 0.04%
- Published 09.09.2025 02:15:41
- Last modified 09.09.2025 16:28:43
- Source cna@sap.com
- Teams watchlist Login
- Open Login
Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users. Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorSAP_SE
≫
Product
SAP Landscape Transformation Replication Server
Default Statusunaffected
Version
DMIS 2011_1_620
Status
affected
Version
2011_1_640
Status
affected
Version
2011_1_700
Status
affected
Version
2011_1_710
Status
affected
Version
2011_1_730
Status
affected
Version
2011_1_731
Status
affected
Version
2011_1_752
Status
affected
Version
2020
Status
affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.091 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| cna@sap.com | 8.1 | 1.7 | 5.8 |
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
|
CWE-1287 Improper Validation of Specified Type of Input
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.