{"id":"CVE-2025-42929","aliases":["EUVD-2025-27200","GHSA-9vrq-3cxg-5mhw"],"status":"published","title":"Missing input validation vulnerability in SAP Landscape Transformation Replication Server","description":"Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00243,"percentile":0.15658,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1287"],"published":"2025-09-09T02:10:59Z","modified":"2026-06-17T09:23:15Z","products":[{"vendor":"sap_se","product":"sap landscape transformation replication server"}],"references":[{"url":"https://me.sap.com/notes/3633002"},{"url":"https://url.sap/sapsecuritypatchday"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-42929"},{"url":"https://github.com/advisories/GHSA-9vrq-3cxg-5mhw"}],"sources":{"cve":[{"id":"CVE-2025-42929","title":"Missing input validation vulnerability in SAP Landscape Transformation Replication Server","description":"Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.","status":"published","published":"2025-09-09T02:10:59.447Z","modified":"2025-09-09T13:56:41.986Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-1287"],"updated_at":"2026-11-02T14:32:30.9782Z"}],"euvd":[{"id":"EUVD-2025-27200","description":"Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.","status":"published","published":"2025-09-09T02:10:59Z","modified":"2025-09-09T13:56:41Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:31:45.48357Z"}],"ghsa":[{"id":"GHSA-9vrq-3cxg-5mhw","title":"Due to missing input validation, an attacker with high privilege access to ABAP reports could...","description":"Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.","status":"published","published":"2025-09-09T03:30:19Z","modified":"2025-09-09T03:30:19Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-1287"],"updated_at":"2026-11-02T15:03:32.10009Z"}],"nvd":[{"id":"CVE-2025-42929","description":"Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.","status":"published","published":"2025-09-09T02:15:41.42Z","modified":"2026-06-17T09:23:15.337Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-1287"],"updated_at":"2026-11-02T14:11:27.73916Z"}]}}