Database Manipulation Vulnerability in SAP Business Warehouse and Plug-In Basis

CVE-2025-42983

What is CVE-2025-42983?

An authentication flaw in SAP Business Warehouse and SAP Plug-In Basis permits an authenticated attacker to execute unauthorized database operations. By exploiting this vulnerability, attackers have the capability to drop arbitrary tables within the SAP database, leading to potential data loss and system unavailability. While this breach enables the deletion of database entries, it does not grant access to read the existing data, posing significant risks to the integrity and availability of vital information.

References