CVEvulnerability

CVE-2025-25244

5.7 MEDIUM Published 2025-03-11 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-03-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-862

Description

SAP Business Warehouse (Process Chains) allows an attacker to manipulate the process execution due to missing authorization check. An attacker with display authorization for the process chain object could set one or all processes to be skipped. This means corresponding activities, such as data loading, activation, or deletion, will not be executed as initially modeled. This could lead to unexpected results in business reporting leading to a significant impact on integrity. However, there is no impact on confidentiality or availability.

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References