Security Advisory

CVE-2025-42944

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-09 02:11:39

Last updated 2026-02-26 17:49:05

Assigner sap

State PUBLISHED

Description

Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution, posing a high impact to the applications confidentiality, integrity, and availability.

← Browse all CVEs View on cve.org ↗