VYPR
← All advisories
Medium severity5.0NVD Advisory· Published Jul 8, 2025· Updated Jun 17, 2026

CVE-2025-42968

CVE-2025-42968

Description

SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on confidentiality with no effect on integrity or availability of the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

20
  • SAP/Netweaverllm-fuzzy19 versions
    (expand)+ 18 more
    • (no CPE)
    • cpe:2.3:a:sap:netweaver:700:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:701:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:710:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:740:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:750:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:751:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:752:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:753:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:754:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:755:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:756:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:757:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:758:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:816:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:914:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver:916:*:*:*:*:*:*:*
  • SAP/Sap Netweaver (rfc Enabled Function Module)v5
    Range: SAP_BW 700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.