What’s Vulnerable › Vulnerabilities
CVE-2025-42983: Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis
- Severity: high (CVSS 8.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-06-10 · updated 2026-06-17
- Weakness: CWE-862
Description
SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any data.
Affected products
- SAP_SE SAP Business Warehouse and SAP Plug-In Basis: PI_BASIS 2006_1_700, 701, 702, 731, 740, SAP_BW 750 (+10)
References
Get alerted when CVE-2025-42983 or the next vulnerability affects your stack