CVE 8.1 HIGH

Missing input validation vulnerability in SAP Landscape Transformation Replication Server_CVE-2025-42929

8.1 / 10
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Description

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.

Basic Information

ID CVE-2025-42929
Source sap
Published Sep 9, 2025 at 02:10

Affected Product

Vendor SAP_SE
Product SAP Landscape Transformation Replication Server
Version DMIS 2011_1_620
Affected Versions SAP_SE SAP Landscape Transformation Replication Server DMIS 2011_1_620
SAP_SE SAP Landscape Transformation Replication Server 2011_1_640
SAP_SE SAP Landscape Transformation Replication Server 2011_1_700
SAP_SE SAP Landscape Transformation Replication Server 2011_1_710
SAP_SE SAP Landscape Transformation Replication Server 2011_1_730
SAP_SE SAP Landscape Transformation Replication Server 2011_1_731
SAP_SE SAP Landscape Transformation Replication Server 2011_1_752
SAP_SE SAP Landscape Transformation Replication Server 2020

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.