CVE-2025-42974 — Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)
Due to missing authorization check, an attacker authenticated as a non-administrative user could call a remote-enabled function module. This could enable access to information n…
Published: 2025-07-08 · CVSS: 4.3 · CVSS 3.1
Due to missing authorization check, an attacker authenticated as a non-administrative user could call a remote-enabled function module. This could enable access to information normally restricted, resulting in low impact on confidentiality. There is no impact on integrity or availability.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7