CVE-2025-42947: SAP SE SAP Fica Odn Framework

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on confidentiality of the application.

Affected products

• SAP SE SAP Fica Odn Framework: version S4CORE 102 only; version 103 only; version 104 only; version 105 only; version 106 only; version 107 only; …

Published 2025-07-23. Last modified 2026-06-17.