PT-2025-28279 · Sap · Sap Bw/4Hana Bex Tools+1

Published 2025-07-07 · Updated 2025-07-23 · CVE-2025-42960

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse and SAP BW/4HANA BEx Tools (affected versions not specified)

Description: The issue allows an authenticated attacker to gain higher access levels than intended by exploiting improper authorization checks. This could potentially impact data integrity by allowing deletion of user table entries. It has no impact on the confidentiality and availability of the application.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2025-10651

CVE-2025-42960

Affected Products

Sap Bw/4Hana Bex Tools

Sap Business Warehouse

References · 7

• https://bdu.fstec.ru/vul/2025-10651 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-42960 · Security Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2025.html · Note
• https://twitter.com/jmdevlabs/status/1948045881262915794 · Twitter Post
• https://me.sap.com/notes/3608991 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/1942418299242877235 · Twitter Post