PT-2025-24591 · Sap · Sap Netweaver

Published

2025-06-09

·

Updated

2025-06-11

·

CVE-2025-42989

CVSS v3.1

9.6

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP (affected versions not specified)
Description The issue is related to a missing authorization check in the RFC inbound processing, allowing an authenticated user to escalate their privileges. This could critically impact the integrity and availability of the system. The vulnerability is described as a critical flaw with a high severity rating. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2025-06654
CVE-2025-42989

Affected Products

Sap Netweaver