CVE-2025-42954: Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)
SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on availability of the application, there is no impact on confidentiality and integrity.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-42954?
CVE-2025-42954 has a high severity rating due to its potential to cause significant performance issues in affected systems.
How do I fix CVE-2025-42954?
To fix CVE-2025-42954, apply the latest security patches provided by SAP for the NetWeaver Business Warehouse.
What type of attack is associated with CVE-2025-42954?
CVE-2025-42954 involves a privileged attacker exploiting RFC enabled function modules to cause excessive CPU load.
Which software is affected by CVE-2025-42954?
CVE-2025-42954 specifically affects the SAP NetWeaver Business Warehouse application.
What is the impact of exploiting CVE-2025-42954?
Exploiting CVE-2025-42954 can lead to reduced performance or interruptions in operation of the affected resource.