CVE-2025-42875 | BDVDB-2026-304752 Detail
SAP_SESAP NetWeaver Internet Communication Framework
Description#
The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, violating secure authentication practices causing low impact on Confidentiality, Integrity and Availability of the application.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
- CWE-306 Missing Authentication for Critical Function
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.