Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2025-42983Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis

Description

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any data.

Timeline

  1. ID reserved

    By sap

  2. · 55 days later

    Published

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2025-42983, by who scored it
Scored byCVSSScoreVector
sapCNA (assigner)3.1High8.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
NVDNVD · Deferred3.1High8.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
EPSS (exploitation in 30 days)
0.32% · top 75% of all CVEs (14 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.5.

Affected products

  • SAP_SE · SAP Business Warehouse and SAP Plug-In Basis

    • affected PI_BASIS 2006_1_700
    • affected 701
    • affected 702
    • affected 731
    • affected 740
    • affected SAP_BW 750
    • affected 751
    • affected 752
    • affected 753
    • affected 754
    • affected 755
    • affected 756
    • affected 757
    • affected 758
    • affected 914
    • affected 915

References

References2

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2025-42983 badge
[![CVE-2025-42983](https://cveledger.app/badge/CVE-2025-42983.svg)](https://cveledger.app/cve/CVE-2025-42983)

Record last updated .