CVE-2025-42930
SAP Business Planning and Consolidation allows an authenticated standard user to call a function module by crafting spec
SAP Business Planning and Consolidation allows an authenticated standard user to call a function module by crafting specific parameters that causes a loop, consuming excessive resources and resulting in system unavailability. This leads to high impact on the availability of the application, there is no impact on confidentiality or integrity.
MEDIUM · CVSS 6.5
EPSS 0.00104
Monitor
- No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence
Sigma rules0
YARA rules0