Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-42911

SAP NetWeaver (Service Data Download) allows an authenticated user to call a remote-enabled function module, which could grant access to information about the SAP system and operating system. This leads to a low impact on confidentiality, with no effect on the integrity and availability of the application

Published

2025-09-09T02:15:38.737

Last Modified

2025-10-23T12:45:48.857

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.0 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-862
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sap sap_basis 700 Yes
Application sap sap_basis 701 Yes
Application sap sap_basis 702 Yes
Application sap sap_basis 731 Yes
Application sap sap_basis 740 Yes
Application sap sap_basis 750 Yes
Application sap sap_basis 751 Yes
Application sap sap_basis 752 Yes
Application sap sap_basis 753 Yes
Application sap sap_basis 754 Yes
Application sap sap_basis 755 Yes
Application sap sap_basis 756 Yes
Application sap sap_basis 757 Yes
Application sap sap_basis 758 Yes
Application sap sap_basis 816 Yes
References