VYPR
Medium severity4.3NVD Advisory· Published Sep 23, 2025· Updated Apr 15, 2026

CVE-2025-42907

CVE-2025-42907

Description

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system.

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.