Vulnerabilities

CVSS

5.5 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L

Risk score

44.0

Published

2025-07-23

Status

Published

SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on confidentiality of the application.

Weaknesses

CWE-94

Coverage 1

threat-intel

Multiples vulnérabilités dans les produits SAP (11 août 2026)

Multiple vulnerabilities have been discovered in SAP products, including remote code execution, privilege escalation, and data confidentiality breaches. These vulnerabilities can be exploited to cause significant damage.…

CERT-FR · Aug 11, 2026 High

CVE-2025-42947CVE-2025-58057CVE-2026-33871vulnerabilitysapsecurity

All articles mentioning it

Advisories and references

• me.sap.com/notes/3540688
• url.sap/sapsecuritypatchday