Missing Authorization Check in SAP NetWeaver Application Server for ABAP
CVE-2025-42961
4.9MEDIUM
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-42961?
An authenticated user with elevated privileges in SAP NetWeaver Application Server for ABAP can exploit a missing authorization check, allowing unauthorized access to sensitive database tables. This weakness results from inadequate validation of user permissions, potentially leading to unauthorized reading of critical data. While this vulnerability poses significant risks to data confidentiality, it does not compromise system integrity or availability.
Affected Version(s)
SAP NetWeaver Application Server for ABAP SAP_BASIS 700
SAP NetWeaver Application Server for ABAP SAP_BASIS 701
SAP NetWeaver Application Server for ABAP SAP_BASIS 702