CVE-2025-42988

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no impact on integrity and availability of the application.

• CWE-918

• https://me.sap.com/notes/3585545Permissions Required
• https://url.sap/sapsecuritypatchdayPatch

Published

Jun 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-42982SAP GRC allows a non-administrative user to access and initi…8.8
• CVE-2025-42983SAP Business Warehouse and SAP Plug-In Basis allows an authe…8.5
• CVE-2025-42984SAP S/4HANA Manage Central Purchase Contract does not perfor…5.4
• CVE-2025-42985Due to insufficient sanitization in the SAP BusinessObjects …6.1
• CVE-2025-42986Due to a missing authorization check in an obsolete RFC enab…4.3
• CVE-2025-42987SAP Manage Processing Rules (For Bank Statement) allows an a…4.3
• CVE-2025-42989RFC inbound processing�does not perform necessary authorizat…9.6
• CVE-2025-4299A vulnerability was found in Tenda AC1206 up to 15.03.06.23.…9.8
• CVE-2025-42990Unprotected SAPUI5 applications allow an attacker with basic…3
• CVE-2025-42991SAP S/4HANA (Bank Account Application) does not perform nece…4.3
• CVE-2025-42992SAPCAR allows an attacker logged in with high privileges to …6.9
• CVE-2025-42993Due to a missing authorization check vulnerability in SAP S/…6.7