CVE-2025-42911

Publication date

2025-09-09 02:05:56

Family

sap

State

PUBLISHED

Description

SAP NetWeaver (Service Data Download) allows an authenticated user to call a remote-enabled function module, which could grant access to information about the SAP system and operating system. This leads to a low impact on confidentiality, with no effect on the integrity and availability of the application