Resource Consumption Vulnerability in SAP Business Planning and Consolidation
CVE-2025-42930
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 9 September 2025
What is CVE-2025-42930?
SAP Business Planning and Consolidation is susceptible to a resource consumption vulnerability, where an authenticated standard user can invoke a function module by providing specific parameters. This action triggers a loop that consumes a significant amount of resources, leading to potential unavailability of the application. While this vulnerability does not compromise the confidentiality or integrity of the system, it poses a serious risk to the application's availability, severely impacting business operations and user access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
SAP Business Planning and Consolidation BPC4HANA 200
SAP Business Planning and Consolidation 300
SAP Business Planning and Consolidation SAP_BW 750
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved