What is CVE-2025-42960?

CVE-2025-42960 is a medium-severity vulnerability in Sap Se Business Warehouse And Bw/4hana Bex Tools, classified under Missing Authorization. CVSS score: 4.3/10. Published 2025-07-08.

How severe is CVE-2025-42960?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Auth bypass in Sap Se Business Warehouse And Bw/4hana Bex Tools

CVE-2025-42960

SAP Business Warehouse and SAP BW/4HANA BEx Tools allow an authenticated attacker to gain higher access levels than intended by exploiting improper authorization checks. This could potentially impact data integrity by allowing deletion of user table entries.�It has no impact on the confidentiality and availability of the application.

Vulnerability class: Broken Access Control

EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Sap_se Sap Business Warehouse And Bw/4hana Bex Tools — versions DW4CORE 100, 200, 300

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

Frequently asked questions

What is CVE-2025-42960?: CVE-2025-42960 is a medium-severity vulnerability in Sap Se Business Warehouse And Bw/4hana Bex Tools, classified under Missing Authorization. CVSS score: 4.3/10. Published 2025-07-08.
How severe is CVE-2025-42960?: Medium severity. CVSS v3 base score is 4.3 out of 10.