What is CVE-2025-42891?

CVE-2025-42891 is a medium-severity vulnerability in Sap Se Enterprise Search For Abap, classified under Missing Authorization. CVSS score: 5.5/10. Published 2025-12-09.

How severe is CVE-2025-42891?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Auth bypass in Sap Se Enterprise Search For Abap

CVE-2025-42891

Due to a missing authorization check in SAP Enterprise Search for ABAP, an attacker with high privileges may read and export the contents of database tables into an ABAP report. This could lead to a high impact on data confidentiality and a low impact on data integrity. There is no impact on application's availability.

Vulnerability class: Broken Access Control

EPSS: 0.003 (19.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N.

Affected products

Sap_se Sap Enterprise Search For Abap — versions SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

Frequently asked questions

What is CVE-2025-42891?: CVE-2025-42891 is a medium-severity vulnerability in Sap Se Enterprise Search For Abap, classified under Missing Authorization. CVSS score: 5.5/10. Published 2025-12-09.
How severe is CVE-2025-42891?: Medium severity. CVSS v3 base score is 5.5 out of 10.