Description
SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or rendering the system unusable. On successful exploitation, an attacker can completely delete database entries but is not able to read any data.
References (2)
Core 2
Core References
Vendor Advisory
https://me.sap.com/notes/3606484
Vendor Advisory
https://url.sap/sapsecuritypatchday
Scores
CVSS v3
8.5
EPSS
0.0023
EPSS Percentile
45.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-862
Status
published
Products (16)
SAP_SE/SAP Business Warehouse and SAP Plug-In Basis
701
SAP_SE/SAP Business Warehouse and SAP Plug-In Basis
702
SAP_SE/SAP Business Warehouse and SAP Plug-In Basis
731
SAP_SE/SAP Business Warehouse and SAP Plug-In Basis
740
SAP_SE/SAP Business Warehouse and SAP Plug-In Basis
751
SAP_SE/SAP Business Warehouse and SAP Plug-In Basis
752
SAP_SE/SAP Business Warehouse and SAP Plug-In Basis
753
SAP_SE/SAP Business Warehouse and SAP Plug-In Basis
754
SAP_SE/SAP Business Warehouse and SAP Plug-In Basis
755
SAP_SE/SAP Business Warehouse and SAP Plug-In Basis
756
... and 6 more
Published
Jun 10, 2025
Tracked Since
Feb 18, 2026