CVE-2025-42974: SAP SE SAP NetWeaver And Abap Platform Sdccn

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Due to missing authorization check, an attacker authenticated as a non-administrative user could call a remote-enabled function module. This could enable access to information normally restricted, resulting in low impact on confidentiality. There is no impact on integrity or availability.

Affected products

• SAP SE SAP NetWeaver And Abap Platform Sdccn: version 2008_1_710 only; version 740 only

Published 2025-07-08. Last modified 2026-06-17.