CVE-2025-30013

Summary

CVE-2025-30013 is a critical vulnerability affecting SAP ERP BW Business Content. The issue lies in certain function modules that mishandle user input, enabling attackers to inject OS commands when executed with elevated privileges. This vulnerability poses a significant security risk as it allows the execution of unintended commands on the underlying system, potentially leading to the compromise of confidentiality, integrity, and availability of the application. Attackers can exploit this flaw to gain unauthorized access, install malware, or cause denial-of-service conditions. System administrators are strongly advised to apply the available patches to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.