CVE-2025-42953: Missing Authorization check in SAP NetWeaver Application Server for ABAP
Published Jul 8, 2025
·Updated
SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This could completely compromise the integrity and availability with no impact on confidentiality of the system.
Affected Software
1 affected component
SAP NetWeaver Application Server for ABAP
Event History
Jul 8, 2025
CVE Published
via MITRE·12:34 AM
Data Sourced
via MITRE·12:34 AM
DescriptionSeverity
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-42953?
CVE-2025-42953 has a critical severity rating due to the potential for privilege escalation.
2
How do I fix CVE-2025-42953?
To fix CVE-2025-42953, apply the latest security patches provided by SAP for the NetWeaver Application Server for ABAP.
3
What are the consequences of CVE-2025-42953?
CVE-2025-42953 can lead to complete compromise of system integrity and availability.
4
Who is affected by CVE-2025-42953?
Organizations using SAP NetWeaver Application Server for ABAP are affected by CVE-2025-42953.
5
What type of vulnerability is CVE-2025-42953?
CVE-2025-42953 is a privilege escalation vulnerability.