Database Query Execution Vulnerability in SAP Starter Solution

CVE-2025-42889

What is CVE-2025-42889?

The SAP Starter Solution has a vulnerability that permits authenticated attackers to execute specifically crafted database queries. This exploitation can lead to unauthorized access to the back-end database, potentially exposing sensitive data. While this issue may compromise the confidentiality and integrity of the application, it does not affect availability, allowing attackers to manipulate the database without direct interruption of services.

References