Skip to content
OpenAdvisories
High · 8.5 CVE-2025-42983 EUVD-2025-17603GHSA-6m52-p2fg-w7xc

Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

Published Jun 10, 2025 · Updated Jun 10, 2025 · Assigned by sap

Description

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any data.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Business Warehouse and SAP Plug-In Basis PI_BASIS 2006_1_700, 701, 702, 731, 740, SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, 758, 914, 915 —

Advisories 2

References