What’s Vulnerable › Vulnerabilities
CVE-2025-42960: Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx Tools
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-08 · updated 2026-06-17
- Weakness: CWE-862
Description
SAP Business Warehouse and SAP BW/4HANA BEx Tools allow an authenticated attacker to gain higher access levels than intended by exploiting improper authorization checks. This could potentially impact data integrity by allowing deletion of user table entries.�It has no impact on the confidentiality and availability of the application.
Affected products
- SAP_SE SAP Business Warehouse and SAP BW/4HANA BEx Tools: DW4CORE 100, 200, 300, 400, SAP_BW 700, 701 (+14)
References
Get alerted when CVE-2025-42960 or the next vulnerability affects your stack