CNNVD-202507-795 Information

CNNVD ID

CNNVD-202507-795

CVE-2025-42952

  • CNNVD Published: 2025-07-08

Description (Chinese)

SAP Business Warehouse和SAP Plug-In Basis都是德国思爱普(SAP)公司的产品。SAP Business Warehouse是用于执行业务流程的关键组件,它允许用户设计、实施和管理业务流程,确保流程的合规性,并通过自动化减少手动操作的需要。SAP Plug-In Basis是一个插件。 SAP Business Warehouse和SAP Plug-In Basis存在安全漏洞,该漏洞源于已验证攻击者可向任意SAP数据库表和结构添加字段,可能导致系统不可用。

Description (English)

SAP Business Warehouse and SAP Plug-In Basis are products of SAP Germany. SAP Business Wayhouse is a key component for the implementation of business processes that allows users to design, implement and manage business processes, ensures process compliance and reduces the need for manual operations through automation. SAP Plug-In Basis is a plugin. There is a security loophole in SAP Business Warehouse and SAP Plug-In Basis, which stems from the proven ability of the attackers to add fields to any SAP database table and structure, which may result in the system not being available.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

思爱普

Published

2025-07-08

Last Modified

2026-02-24

References

https://me.sap.com/notes/3623255 https://url.sap/sapsecuritypatchday

Patch

https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2025.html

Share on: