8.1
/ 10
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
Description
Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.
Basic Information
ID
CVE-2025-42929
Source
sap
Published
Sep 9, 2025 at 02:10
Affected Product
Vendor
SAP_SE
Product
SAP Landscape Transformation Replication Server
Version
DMIS 2011_1_620
Affected Versions
SAP_SE SAP Landscape Transformation Replication Server DMIS 2011_1_620
SAP_SE SAP Landscape Transformation Replication Server 2011_1_640
SAP_SE SAP Landscape Transformation Replication Server 2011_1_700
SAP_SE SAP Landscape Transformation Replication Server 2011_1_710
SAP_SE SAP Landscape Transformation Replication Server 2011_1_730
SAP_SE SAP Landscape Transformation Replication Server 2011_1_731
SAP_SE SAP Landscape Transformation Replication Server 2011_1_752
SAP_SE SAP Landscape Transformation Replication Server 2020
SAP_SE SAP Landscape Transformation Replication Server 2011_1_640
SAP_SE SAP Landscape Transformation Replication Server 2011_1_700
SAP_SE SAP Landscape Transformation Replication Server 2011_1_710
SAP_SE SAP Landscape Transformation Replication Server 2011_1_730
SAP_SE SAP Landscape Transformation Replication Server 2011_1_731
SAP_SE SAP Landscape Transformation Replication Server 2011_1_752
SAP_SE SAP Landscape Transformation Replication Server 2020