CVE 8.1 HIGH

Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)_CVE-2025-42916

8.1 / 10
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Description

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on confidentiality.

Basic Information

ID CVE-2025-42916
Source sap
Published Sep 9, 2025 at 02:07

Affected Product

Vendor SAP_SE
Product SAP S/4HANA (Private Cloud or On-Premise)
Version S4CORE 102
Affected Versions SAP_SE SAP S/4HANA (Private Cloud or On-Premise) S4CORE 102
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 103
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 104
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 105
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 106
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 107
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 108

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.