CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. It may be remotely exploitable.
CVE
CVE-2025-42968
Severity
MEDIUM
CVSS
5
EPSS
0.24%
Original NVD Description
SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on confidentiality with no effect on integrity or availability of the application.
Related CVEs
Other vulnerabilities affecting the same vendor(s)