Local Variable Injection Vulnerability in SAP FICA ODN Framework

CVE-2025-42947

What is CVE-2025-42947?

The SAP FICA ODN framework has a vulnerability that allows users with high privileges to inject malicious values into local variables. This can lead to unexpected application behavior, compromising the integrity of the application. While the availability of the application remains largely unaffected, it opens a pathway for attackers to manipulate application functions, which poses significant risks to business operations. Organizations using this framework should assess their security posture and apply recommended patches to mitigate potential risks.

References