CVE-2025-42911 — Missing Authorization check in SAP NetWeaver (Service Data Download)
SAP NetWeaver (Service Data Download) allows an authenticated user to call a remote-enabled function module, which could grant access to information about the SAP system and ope…
Published: 2025-09-09 · CVSS: 5.0 · CVSS 3.1
SAP NetWeaver (Service Data Download) allows an authenticated user to call a remote-enabled function module, which could grant access to information about the SAP system and operating system. This leads to a low impact on confidentiality, with no effect on the integrity and availability of the application
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7