CVE-2025-42891
Missing Authorization check in SAP Enterprise Search for ABAP
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
09 dic 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Due to a missing authorization check in SAP Enterprise Search for ABAP, an attacker with high privileges may read and export the contents of database tables into an ABAP report. This could lead to a high impact on data confidentiality and a low impact on data integrity. There is no impact on application's availability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
Productos afectados
SAP_SE · SAP Enterprise Search for ABAP¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →