Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-42958 EUVD-2025-27195GHSA-r2xh-ghmw-jjjw

Missing Authentication check in SAP NetWeaver

Published Sep 9, 2025 · Updated Feb 26, 2026 · Assigned by sap

Description

Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the confidentiality, integrity, and availability of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.53, KERNEL 7.22, 7.54 —

Advisories 2

References