CVE-2025-42947CWE-94

Code Injection vulnerability in SAP FICA ODN framework

Medium · published July 23, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on confidentiality of the application.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-07-23T03:25Z
EPSS history
Timeline
  • 23 JUL 03:25Z
    Code Injection vulnerability in SAP FICA ODN framework
    cvelistv5