← Database

CVE-2025-42907

MEDIUM CVSS: 4.3 Published: 2025-09-23 Modified: 2026-06-17

Description

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system.

Affected Platforms

Unknown

Weakness Type

CWE-918

References