CVE-2025-42974CWE-862

Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)

Medium · published July 8, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
18.5
In the wild
Unconfirmed
What it is

Due to missing authorization check, an attacker authenticated as a non-administrative user could call a remote-enabled function module. This could enable access to information normally restricted, resulting in low impact on confidentiality. There is no impact on integrity or availability.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00272 · 18.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-07-08T00:37Z
EPSS history
Timeline
  • 08 JUL 00:37Z
    Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)
    cvelistv5