8.1
/ 10
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
Description
Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on confidentiality.
Basic Information
ID
CVE-2025-42916
Source
sap
Published
Sep 9, 2025 at 02:07
Affected Product
Vendor
SAP_SE
Product
SAP S/4HANA (Private Cloud or On-Premise)
Version
S4CORE 102
Affected Versions
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) S4CORE 102
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 103
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 104
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 105
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 106
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 107
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 108
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 103
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 104
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 105
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 106
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 107
SAP_SE SAP S/4HANA (Private Cloud or On-Premise) 108