CVE-2025-42989

Publication date

2025-06-10 00:12:16

Family

sap

State

PUBLISHED

Description

RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of the application.