CVE-2025-42954

Description

SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on availability of the application, there is no impact on confidentiality and integrity.

Reserved 2025-04-16 | Published 2025-07-08 | Updated 2025-07-08 | Assigner sap

Problem types

CWE-835: Loop with Unreachable Exit Condition

Product status

Default status
unaffected

DW4CORE 100
affected

200
affected

300
affected

400
affected

SAP_BW 700
affected

701
affected

702
affected

731
affected

740
affected

750
affected

751
affected

752
affected

753
affected

754
affected

755
affected

756
affected

757
affected

758
affected

816
affected

SAP_BW_VIRTUAL_COMP 701
affected

References

me.sap.com/notes/3608156

url.sap/sapsecuritypatchday

cve.org (CVE-2025-42954)

nvd.nist.gov (CVE-2025-42954)

Download JSON