PT-2025-24587 · Sap · Sap Plug-In Basis+1

Published 2025-06-10 · Updated 2025-06-10 · CVE-2025-42983

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions SAP Business Warehouse and SAP Plug-In Basis (affected versions not specified)

Description The issue allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2025-06758

CVE-2025-42983

Affected Products

Sap Business Warehouse

Sap Plug-In Basis

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-42983 · Security Note
• https://bdu.fstec.ru/vul/2025-06758 · Security Note
• https://me.sap.com/notes/3606484 · Note
• https://t.me/cvetracker/25844 · Telegram Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/june-2025.html · Note
• https://help.sap.com/doc/saphelp_em92/9.2/en-US/5b/bccb53ad377114e10000000a174cb4/content.htm?no_cache=true · Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CveFindCom/status/1932236591960879243 · Twitter Post
• https://t.me/latest_high_impact_cve/2594 · Telegram Post