PT-2025-15371 · Sap · Sap Erp Bw Business Content

Published 2025-04-08 · Updated 2025-04-08 · CVE-2025-30013

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SAP ERP BW Business Content (affected versions not specified)

Description: The issue is related to OS Command Injection through certain function modules. When these modules are executed with elevated privileges, they improperly handle user input, allowing an attacker to inject arbitrary OS commands. This poses a significant security risk to the confidentiality, integrity, and availability of the application.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2025-04844

CVE-2025-30013

Affected Products

Sap Erp Bw Business Content

References · 7

• https://bdu.fstec.ru/vul/2025-04844 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-30013 · Security Note
• https://t.me/cvetracker/21094 · Telegram Post
• https://twitter.com/CVEnew/status/1909528294581846125 · Twitter Post
• https://t.me/cvedetector/22417 · Telegram Post
• https://me.sap.com/notes/3571093 · Note
• https://url.sap/sapsecuritypatchday · Note