SAP Business Warehouse and Plug-In Basis Vulnerability Exposes Database to Attacks

CVE-2025-42952

What is CVE-2025-42952?

An authenticated attacker can exploit a vulnerability in SAP Business Warehouse and SAP Plug-In Basis, enabling them to add fields to arbitrary SAP database tables and structures. This capability can lead to system instability, as it allows the potential triggering of short dumps during login attempts, which disrupts user access and may result in system outages. While data confidentiality and integrity remain intact, the risk to system availability poses significant operational challenges for organizations relying on these SAP products.

References