Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2025-42929— Missing input validation vulnerability in SAP Landscape Transformation Replication Server

Quick assessment

Affected

SAP_SE SAP Landscape Transformation Replication Server

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SAP Landscape Transformation Replication Server是德国思爱普（SAP）公司的一个数据复制和转换工具。 SAP Landscape Transformation Replication Server存在安全漏洞，该漏洞源于缺少输入验证，可能导致攻击者删除数据库表内容。

CVSS 8.1 · High EPSS 0.24% · P16 Updated Sep 09, 2025

Possible ATT&CK Techniques 2 AI

T1136 · Create Account T1485 · Data Destruction

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-42929

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Missing input validation vulnerability in SAP Landscape Transformation Replication Server

Source: CVE Program / CVE List V5

Vulnerability Description

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

CWE-1287

Source: CVE Program / CVE List V5

Vulnerability Title

SAP Landscape Transformation Replication Server 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
SAP_SE	SAP Landscape Transformation Replication Server	DMIS 2011_1_620	-

II. Public POCs for CVE-2025-42929

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2025-42929

请登录查看更多情报信息。

https://www.cve.org/CVERecord?id=CVE-2025-42929

Same Patch Batch · SAP_SE · 2025-09-09 · 20 CVEs total

CVE-2025-42944	10.0 CRITICAL	Insecure Deserialization vulnerability in SAP Netweaver (RMI-P4)
CVE-2025-42922	9.9 CRITICAL	Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service)
CVE-2025-42958	9.1 CRITICAL	Missing Authentication check in SAP NetWeaver
CVE-2025-42933	8.8 HIGH	Insecure Storage of Sensitive Information in SAP Business One (SLD)
CVE-2025-42916	8.1 HIGH	Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)
CVE-2025-42917	6.5 MEDIUM	Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application)
CVE-2025-42930	6.5 MEDIUM	Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation
CVE-2025-42912	6.5 MEDIUM	Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
CVE-2025-42920	6.1 MEDIUM	Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management
CVE-2025-42938	6.1 MEDIUM	Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform
CVE-2025-42915	5.4 MEDIUM	Missing Authorization Check in Fiori app (Manage Payment Blocks)
CVE-2025-42926	5.3 MEDIUM	Missing Authentication check in SAP NetWeaver Application Server Java
CVE-2025-42911	5.0 MEDIUM	Missing Authorization check in SAP NetWeaver (Service Data Download)
CVE-2025-42918	4.3 MEDIUM	Missing Authorization check in SAP NetWeaver Application Server for ABAP (Background Proce
CVE-2025-42923	4.3 MEDIUM	Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center
CVE-2025-42925	4.3 MEDIUM	Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)
CVE-2025-42927	3.4 LOW	Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Doc
CVE-2025-42914	3.1 LOW	Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)
CVE-2025-42913	3.1 LOW	Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application)

IV. Related Vulnerabilities

Same vendor: SAP_SE

Same weakness: CWE-1287