CVE-2025-42875: Missing Authentication check in SAP NetWeaver Internet Communication Framework
The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, violating secure authentication practices causing low impact on Confidentiality, Integrity and Availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-42875?
CVE-2025-42875 is classified as a low impact vulnerability affecting the confidentiality, integrity, and availability of the system.
How do I fix CVE-2025-42875?
To mitigate CVE-2025-42875, ensure that proper authentication checks are implemented for features requiring user identification.
What software is affected by CVE-2025-42875?
CVE-2025-42875 affects the SAP NetWeaver Internet Communication Framework.
Can CVE-2025-42875 lead to unauthorized access?
Yes, CVE-2025-42875 allows attackers to reuse authorization tokens, which may lead to unauthorized access.
What practices can prevent CVE-2025-42875?
Implementing secure authentication practices and conducting regular security audits can help prevent vulnerabilities like CVE-2025-42875.