← CVE Tracker
8.1HIGH

CVE-2025-42916 — Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the…

Unknown · Unknown · Published 9 Sept 2025 · Modified 30 Sept 2026

Description

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on confidentiality.

References

What to do
  1. Check whether Unknown is in your asset inventory.
  2. Patch in the next maintenance window; prioritise internet-facing systems.
  3. Record the decision in your risk register for audit evidence.
Alert me on similar CVEs →
Share

Link: adminadda.com/cve/CVE-2025-42916