CVE-2025-42954CWE-835

Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)

Low · published July 8, 2025

CVSS v3.1
2.7
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on availability of the application, there is no impact on confidentiality and integrity.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.7th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2025-07-08T00:34Z
EPSS history
Timeline
  • 08 JUL 00:34Z
    Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)
    cvelistv5