CVE-2025-42955 — Missing authorization check in SAP Cloud Connector

CVE-2025-42955

Missing authorization check in SAP Cloud Connector PUBLISHED

Description (CNA)

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of the service. Confidentiality and integrity of the data are not affected.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Cloud Connector	affected SAP_CLOUD_CONNECTOR 2.0

CWE

CWE-862

References

https://me.sap.com/notes/3611345
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.