PT-2025-39106 · Sap · Api Platform

Published 2025-09-23 · Updated 2025-09-23 · CVE-2025-42907

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions SAP BI Platform (affected versions not specified)

Description An attacker can modify the IP address within the LogonToken associated with OpenDoc. Accessing the modified link in a web browser may redirect a ping request to a different server. This manipulation has a limited impact on data integrity, with no effect on confidentiality or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-42907

Affected Products

Api Platform

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-42907 · Security Note
• https://t.me/CVEtracker/33118 · Telegram Post
• https://twitter.com/CVEnew/status/1970393462919884949 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1970416459038826690 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://me.sap.com/notes/3540622 · Note