Missing Authorization Check in SAP NetWeaver Application Server for ABAP

CVE-2025-42961

What is CVE-2025-42961?

An authenticated user with elevated privileges in SAP NetWeaver Application Server for ABAP can exploit a missing authorization check, allowing unauthorized access to sensitive database tables. This weakness results from inadequate validation of user permissions, potentially leading to unauthorized reading of critical data. While this vulnerability poses significant risks to data confidentiality, it does not compromise system integrity or availability.

References