PT-2025-10668 · Sap · Sap Business Warehouse

Published 2025-02-05 · Updated 2025-03-11 · CVE-2025-25244

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SAP Business Warehouse (Process Chains) (affected versions not specified)

Description The issue allows an attacker to manipulate process execution due to a missing authorization check. An attacker with display authorization for the process chain object could set one or all processes to be skipped, leading to unexpected results in business reporting and a significant impact on integrity. There is no impact on confidentiality or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2025-03176

CVE-2025-25244

Affected Products

Sap Business Warehouse

References · 12

• https://cve.org/CVERecord?id=CVE-2025-25244 · Security Note
• https://bdu.fstec.ru/vul/2025-03176 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-25244 · Security Note
• https://t.me/cvetracker/18866 · Telegram Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 · Note
• https://t.me/cvedetector/20024 · Telegram Post
• https://accounts.sap.com/saml2/idp/sso · Note
• https://me.sap.com/notes/3552144 · Note
• https://cybersecurity-help.cz/vdb/SB2025031133 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://vuldb.com/?id.299172 · Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2025.html · Note