← Database

CVE-2025-42930

MEDIUM CVSS: 6.5 Published: 2025-09-09 Modified: 2026-06-17

Description

SAP Business Planning and Consolidation allows an authenticated standard user to call a function module by crafting specific parameters that causes a loop, consuming excessive resources and resulting in system unavailability. This leads to high impact on the availability of the application, there is no impact on confidentiality or integrity.

Affected Platforms

Unknown

Weakness Type

CWE-606

References