CVE-2025-42965: SAP BusinessObjects BI Platform Central Management Console Promotion Management Application · Server-Side Request Forgery
Affects SAP BusinessObjects BI Platform Central Management Console Promotion Management ApplicationSource CVE Database V5
Not known to be exploited · CVSS 4.1 Medium.
Data as of 26 Oct 2026, 07:57 UTC
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 18% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 8 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| SAP_SE SAP BusinessObjects BI Platform Central Management Console Promotion Management Application | Affected
| Fixed in– |
AI-suggested
To mitigate this vulnerability effectively, European organizations should: 1) Restrict access to the SAP BusinessObjects BI Platform Central Management Console Promotion Management Application to only trusted and necessary personnel, enforcing the principle of least privilege to limit authenticated users who can exploit this vulnerability. 2) Implement network segmentation and firewall rules to restrict outbound requests from the SAP CMC server to internal network segments, thereby limiting the ability of SSRF attacks to probe internal endpoints. 3) Monitor and log all job source configuration requests and analyze unusual patterns or timing discrepancies that may indicate SSRF exploitation attempts. 4) Apply SAP security best practices, including regular review and hardening of SAP user roles and permissions to minimize the number of users with high privileges. 5) Stay alert for official SAP patches or security advisories addressing CVE-2025-42965 and apply them promptly once available. 6) Consider deploying Web Application Firewalls (WAFs) with SSRF detection capabilities to detect and block suspicious request patterns targeting the Promotion Management Application. 7) Conduct internal security assessments and penetration testing focused on SSRF vulnerabilities within SAP environments to identify and remediate similar risks proactively.
Description
SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analysing response times for various IP addresses and ports, the attacker can infer valid network endpoints. Successful exploitation may lead to information disclosure. This vulnerability does not impact the integrity or availability of the application.