CVE-2025-42916

LOWCVSS 8.1 · HIGH

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on confidentiality.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-1287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

DFIR Lab@DFIR_Lab1d
🚨 HIGH: CVE-2025-42916 (CVSS 8.1) SAP ABAP missing input validation allows privileged attackers to delete arbitrary database tables. Impact: High integrity/availability loss Mitigation: Apply authorization groups to critical tables #CVE #Vulnerability #PatchNow https://t.co/EnWO06UOd7
0000020
150 followersView on X

Explore more

Back to dashboard