Deserialization Vulnerability in SAP NetWeaver

CVE-2025-42944

What is CVE-2025-42944?

A deserialization vulnerability has been identified in SAP NetWeaver affecting the RMI-P4 module. This vulnerability allows unauthenticated attackers to exploit system weaknesses by sending specially crafted payloads to an open port. If successful, the vulnerability could enable arbitrary execution of operating system commands, which poses significant risks to the confidentiality, integrity, and availability of the application. Organizations using affected versions should apply recommended security patches promptly to mitigate these risks.

References