VULNERABILITY INTELLIGENCE
CVE-2025-42989
CVSS score9.6 CRITICAL
EPSS probability0.44%
CISA KEVNot currently listed
Published2025-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
Description
RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of the application.
Weakness classification
- cna@sap.com: CWE-862