cbcvebase.
CVE-2025-42958
published 2025-09-09

CVE-2025-42958: Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read…

PriorityP351critical9.1CVSS 3.1
AVNACLPRHUINSCCHIHAH
EPSS
0.66%
47.4th percentile
Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the confidentiality, integrity, and availability of the application.

Affected

6 ranges
VendorProductVersion rangeFixed in
sap_sesap_netweaver——
sap_sesap_netweaver——
sap_sesap_netweaver——
sap_sesap_netweaver——
sap_sesap_netweaver——
sap_sesap_netweaver——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.