CVE-2025-42930CWE-606

Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation

Medium · published September 9, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
26.3
In the wild
Unconfirmed
What it is

SAP Business Planning and Consolidation allows an authenticated standard user to call a function module by crafting specific parameters that causes a loop, consuming excessive resources and resulting in system unavailability. This leads to high impact on the availability of the application, there is no impact on confidentiality or integrity.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00340 · 26.3th percentile
Weakness
CWE-606 · Unchecked Input for Loop Condition
Published
2025-09-09T02:11Z
EPSS history
Timeline
  • 09 SEP 02:11Z
    Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation
    cvelistv5