Beveiligingsadvies

CVE-2025-42944

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-09 02:11:39

Laatst bijgewerkt 2026-02-26 17:49:05

Toegewezen door sap

CVSS-score 10.0

Status PUBLISHED

Beschrijving

Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution, posing a high impact to the application's confidentiality, integrity, and availability.

← Alle CVE's bekijken Bekijk op cve.org ↗