CVE-2025-42968 — Missing Authorization check in SAP NetWeaver (RFC enabled function module)
SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP sys…
Published: 2025-07-08 · CVSS: 5.0 · CVSS 3.1
SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on confidentiality with no effect on integrity or availability of the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7