PT-2025-36549 · Sap · Sap Abap Reports

Published 2025-09-09 · Updated 2025-09-14 · CVE-2025-42916

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SAP ABAP Reports (affected versions not specified)

Description: Due to missing input validation in ABAP reports, an attacker with high privilege access could delete the content of arbitrary database tables if the tables are not protected by an authorization group. This can have a high impact on the integrity and availability of the database.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1287

Related Identifiers

CVE-2025-42916

Affected Products

Sap Abap Reports

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-42916 · Security Note
• https://twitter.com/ZeroPathLabs/status/1965245108409819578 · Twitter Post
• https://me.sap.com/notes/3635475 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://t.me/CVEtracker/32021 · Telegram Post
• https://twitter.com/RedPacketSec/status/1965354318107746360 · Twitter Post
• https://twitter.com/cracbot/status/1967181590121120044 · Twitter Post
• https://twitter.com/CVEnew/status/1965244300012241294 · Twitter Post