SAP Business Warehouse and Plug-In Basis Vulnerability Exposes Database to Attacks
CVE-2025-42952
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-42952?
An authenticated attacker can exploit a vulnerability in SAP Business Warehouse and SAP Plug-In Basis, enabling them to add fields to arbitrary SAP database tables and structures. This capability can lead to system instability, as it allows the potential triggering of short dumps during login attempts, which disrupts user access and may result in system outages. While data confidentiality and integrity remain intact, the risk to system availability poses significant operational challenges for organizations relying on these SAP products.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
SAP Business Warehouse and SAP Plug-In Basis PI_BASIS 2006_1_700
SAP Business Warehouse and SAP Plug-In Basis 701
SAP Business Warehouse and SAP Plug-In Basis 702
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved