Authorization Bypass Vulnerability in SAP ABAP Platform

CVE-2025-42949

What is CVE-2025-42949?

A significant vulnerability exists in the SAP ABAP Platform due to a missing authorization check. An authenticated user with elevated privileges can exploit this flaw through the SQL Console, allowing them to bypass authorization restrictions for common transactions. This oversight could lead to unauthorized access to sensitive database tables, thereby compromising the confidentiality of critical data. While the integrity and availability of the system remain intact, this vulnerability poses a serious risk to data security.

References