← Back

CVE-2025-42968

nvd nist
Published: Jul 8, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on confidentiality with no effect on integrity or availability of the application.

Affected (18)

Products: Sap: Netweaver
Sap
1 product
Netweaver
Configuration A
18 vulnerable
Vulnerable SoftwareAffected Versions
Sap
Netweaver
Version 700
Netweaver
Version 701
Netweaver
Version 702
Netweaver
Version 710
Netweaver
Version 731
Netweaver
Version 740
Netweaver
Version 750
Netweaver
Version 751
Netweaver
Version 752
Netweaver
Version 753
Netweaver
Version 754
Netweaver
Version 755
Netweaver
Version 756
Netweaver
Version 757
Netweaver
Version 758
Netweaver
Version 816
Netweaver
Version 914
Netweaver
Version 916

Related CWEs

CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

Source: cna@sap.com
Permissions Required
Source: cna@sap.com
Patch

Timeline

No history available yet.