CVE-2025-42989: Missing Authorization check in SAP NetWeaver Application Server for ABAP
RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-42989?
CVE-2025-42989 has a critical severity rating due to its potential for privilege escalation that can threaten application integrity and availability.
How do I fix CVE-2025-42989?
To fix CVE-2025-42989, ensure that all necessary authorization checks are implemented in the RFC inbound processing of the application.
What software is affected by CVE-2025-42989?
CVE-2025-42989 specifically affects SAP NetWeaver Application Server for ABAP.
What impact does CVE-2025-42989 have if exploited?
Exploitation of CVE-2025-42989 can lead to elevated privileges for an attacker, significantly compromising application integrity and availability.
Who should be concerned about CVE-2025-42989?
Organizations using SAP NetWeaver Application Server for ABAP should be particularly concerned about CVE-2025-42989 due to its critical nature.