Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_netweaver_(rfc_enabled_function_module):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Netweaver (Rfc Enabled Function Module) (2106cf05-695c-58fb-8a52-a9944b0fa06f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-42968 vulnerable 2026-06-08 07:25:08.471625 Missing Authorization check in SAP NetWeaver (RFC enabled function module)
MEDIUM (5)
SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on confidentiality with no effect on integrity or availability of the application.
Published: 2025-07-08T00:36:31.953Z
Updated: 2025-07-08T16:13:36.672Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.