CVE-2025-42954 — Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)

Description (CNA)

SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on availability of the application, there is no impact on confidentiality and integrity.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver Business Warehouse (CCAW application)	affected DW4CORE 100; affected 200; affected 300; affected 400; affected SAP_BW 700; affected 701; affected 702; affected 731; affected 740; affected 750; affected 751; affected 752; affected 753; affected 754; affected 755; affected 756; affected 757; affected 758; affected 816; affected SAP_BW_VIRTUAL_COMP 701

CWE

CWE-835

References

https://me.sap.com/notes/3608156
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.