- Description
- Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on confidentiality.
- Source
- cna@sap.com
- NVD status
- Deferred
CVSS 3.1
- Type
- Secondary
- Base score
- 8.1
- Impact score
- 5.8
- Exploitability score
- 1.7
- Vector string
- CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
- Severity
- HIGH
- cna@sap.com
- CWE-1287
- Hype score
- Not currently trending
🚨 HIGH: CVE-2025-42916 (CVSS 8.1) SAP ABAP missing input validation allows privileged attackers to delete arbitrary database tables. Impact: High integrity/availability loss Mitigation: Apply authorization groups to critical tables #CVE #Vulnerability #PatchNow https://t.co
@DFIR_Lab
21 Oct 2026
24 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-42916 (CVSS:8.1, HIGH) is Awaiting Analysis. Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbi..https://t.co/GaXJ8JzpkB #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
@cracbot
14 Sept 2025
2 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-42916 Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not p… https://t.co/Ad2fvzwJH3
@CVEnew
9 Sept 2025
343 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes