Command Injection Vulnerability in SAP ERP BW Business Content

CVE-2025-30013

What is CVE-2025-30013?

SAP ERP BW Business Content has a vulnerability that allows OS Command Injection through certain function modules. When these modules are executed with elevated privileges, they fail to properly validate user input, enabling attackers to inject and execute arbitrary OS commands. This presents a critical risk to the confidentiality, integrity, and availability of the affected systems, highlighting the need for immediate attention and remediation.

References