Approved changes feed: RSS · Atom

cpe:2.3:a:sap:netweaver:816:*:*:*:*:*:*:*

part: a version: 816 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductNetweaver (27ebb32b-037e-5ce8-844e-70d059f1f917)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-42968 vulnerable 2026-06-08 07:25:08.483658 Missing Authorization check in SAP NetWeaver (RFC enabled function module)
MEDIUM (5)
SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on confidentiality with no effect on integrity or availability of the application.
Published: 2025-07-08T00:36:31.953Z
Updated: 2025-07-08T16:13:36.672Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.