← CVE Intelligence

CVE-2025-42947

Code Injection vulnerability in SAP FICA ODN framework PUBLISHED

Description (CNA)

SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on confidentiality of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP FICA ODN frameworkaffected SAPSCORE 132; affected S4CORE 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108; affected FI-CA 606; affected 616; affected 617; affected 618

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.