CVE-2025-42947
MEDIUM EPSS 21.0%
Published Jul 23, 202511mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Published Jul 23, 2025 11mo ago
Last Modified Jun 17, 2026 2w ago
Description
SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on confidentiality of the application.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality None
Integrity High
Availability Low
Threat Intelligence
EPSS Exploit Probability
21.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-94 Improper Control of Generation of Code (Code Injection) Injection
References 2
- me.sap.com https://me.sap.com/notes/3540688
- url.sap https://url.sap/sapsecuritypatchday
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.