Missing Authentication Vulnerability in SAP HANA 2.0

CVE-2025-42885

What is CVE-2025-42885?

A missing authentication issue in SAP HANA 2.0 (hdbrss) allows unauthorized users to invoke remote-enabled functions. This vulnerability could potentially expose sensitive information to attackers without valid credentials. Although the risk to confidentiality is present, the integrity and availability of the system remain unaffected. Organizations utilizing SAP HANA should take steps to ensure proper authentication mechanisms are enforced to mitigate exposure.

References