← CVE Intelligence

CVE-2025-42958

Missing Authentication check in SAP NetWeaver PUBLISHED

Description (CNA)

Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the confidentiality, integrity, and availability of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP NetWeaveraffected KRNL64NUC 7.22; affected 7.22EXT; affected KRNL64UC 7.22; affected 7.53; affected KERNEL 7.22; affected 7.54

CWE

CWE-250

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.