Unrated severityNVD Advisory· Published Sep 9, 2025· Updated Sep 9, 2025
Missing Authorization check in SAP NetWeaver (Service Data Download)
CVE-2025-42911
Description
SAP NetWeaver (Service Data Download) allows an authenticated user to call a remote-enabled function module, which could grant access to information about the SAP system and operating system. This leads to a low impact on confidentiality, with no effect on the integrity and availability of the application
Affected products
2- SAP_SE/SAP NetWeaver (Service Data Download)v5Range: SAP_BASIS 700
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.