Resource Consumption Vulnerability in SAP Business Planning and Consolidation

CVE-2025-42930

What is CVE-2025-42930?

SAP Business Planning and Consolidation is susceptible to a resource consumption vulnerability, where an authenticated standard user can invoke a function module by providing specific parameters. This action triggers a loop that consumes a significant amount of resources, leading to potential unavailability of the application. While this vulnerability does not compromise the confidentiality or integrity of the system, it poses a serious risk to the application's availability, severely impacting business operations and user access.

References