PT-2025-46230 · Sap · Sap Starter Solution

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-42889

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP Starter Solution (affected versions not specified)

Description SAP Starter Solution allows an authenticated attacker to execute crafted database queries, potentially exposing the back-end database. This can impact the confidentiality and integrity of the application. The issue does not affect availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-14481

CVE-2025-42889

Affected Products

Sap Starter Solution

References · 8

• https://bdu.fstec.ru/vul/2025-14481 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-42889 · Security Note
• https://me.sap.com/notes/2886616 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://t.me/CVEtracker/36968 · Telegram Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/november-2025.html · Note
• https://twitter.com/VulmonFeeds/status/1988101560312754524 · Twitter Post
• https://twitter.com/CVEnew/status/1988077287355666768 · Twitter Post