CVE-2025-42955 — Missing authorization check in SAP Cloud Connector
Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for …
Published: 2025-08-12 · CVSS: 3.5 · CVSS 3.1
Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of the service. Confidentiality and integrity of the data are not affected.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7