cbcvebase.
CVE-2025-42953
published 2025-07-08

CVE-2025-42953: SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This could…

high8.1CVSS 3.1
AVNACLPRLUINSUCNIHAH
SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This could completely compromise the integrity and availability with no impact on confidentiality of the system.

Affected

14 ranges
VendorProductVersion rangeFixed in
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap
sap_sesap_netweaver_application_server_for_abap