PT-2025-32609 · Sap · Abap Platform

Published 2025-08-11 · Updated 2025-08-12 · CVE-2025-42949

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: ABAP Platform (affected versions not specified)

Description: A missing authorization check in the ABAP Platform allows an authenticated user with elevated privileges to bypass authorization restrictions for common transactions using the SQL Console. This could enable an attacker to access and read the contents of database tables without proper authorization, compromising data confidentiality. The integrity and availability of the system are not affected.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2025-16306

CVE-2025-42949

Affected Products

Abap Platform

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-42949 · Security Note
• https://bdu.fstec.ru/vul/2025-16306 · Security Note
• https://t.me/CVEtracker/29735 · Telegram Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/august-2025.html · Note
• https://twitter.com/CVEnew/status/1955101085707735297 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/f8sbrightermind/status/1955136592529531321 · Twitter Post
• https://me.sap.com/notes/3626722 · Note