CVE-2025-42907

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system.

• CWE-918

• https://me.sap.com/notes/3540622
• https://url.sap/sapsecuritypatchday

Published

Sep 23, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4290A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-42901SAP Application Server for ABAP allows an authenticated atta…5.4
• CVE-2025-42902Due to the memory corruption vulnerability in SAP NetWeaver …5.3
• CVE-2025-42903A vulnerability in SAP Financial Service Claims Management R…4.3
• CVE-2025-42904Due to an Information Disclosure vulnerability in Applicatio…6.5
• CVE-2025-42906SAP Commerce Cloud contains a path traversal vulnerability t…5.3
• CVE-2025-42908Due to a Cross-Site Request Forgery (CSRF) vulnerability in …5.4
• CVE-2025-42909SAP Cloud Appliance Library Appliances allows an attacker wi…3
• CVE-2025-4291A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-42910Due to missing verification of file type or content, SAP Sup…9
• CVE-2025-42911SAP NetWeaver (Service Data Download) allows an authenticate…4.3
• CVE-2025-42912SAP HCM My Timesheet Fiori 2.0 application does not perform …6.5