CVE-2025-42958

Published Sep 9, 2025

Last updated 15 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-42958 is a vulnerability affecting SAP NetWeaver applications on IBM i-series systems. It stems from a missing authentication check. This allows unauthorized users with high privileges to read, modify, or delete sensitive information. They can also access administrative or privileged functionalities. The vulnerability exists in SAP NetWeaver applications on IBM i-series. Successful exploitation can directly impact the confidentiality, integrity, and availability of the application.

Description: Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the confidentiality, integrity, and availability of the application.
Source: cna@sap.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.1
Impact score: 6
Exploitability score: 2.3
Vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

cna@sap.com: CWE-250

Hype score: Not currently trending

References