Missing input validation vulnerability in SAP Landscape Transformation Replication Server (SAP_SE SAP Landscape Transformation Replication Server)
En bref
- Source
- NVD
- EPSS
- EPSS 0.24 % · centile 16 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- sap
- Statut NVD
- Deferred
Rechercher sur…
Description
Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.
Faiblesses (CWE)
- CWE-1287 — Improper Validation of Specified Type of Input
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.1 | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H | sap |
| CVSS 3.1 | HIGH 8.1 | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H | NVD · cna@sap.com (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2025-27200
- GCVE · GCVE-0-2025-42929
Avis du CERT-FR
- CERTFR-2025-AVI-0764 — Multiples vulnérabilités dans les produits SAP · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| SAP_SE · SAP Landscape Transformation Replication Server | affected DMIS 2011_1_620 ; affected 2011_1_640 ; affected 2011_1_700 ; affected 2011_1_710 ; affected 2011_1_730 ; affected 2011_1_731 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |