CVE-2025-42954: low-severity vulnerability in SAP_SE SAP NetWeaver Business Warehouse (CCAW…
Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 2.7epss 0.4%
SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on availability of the application, there is no impact on confidentiality and integrity.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Affected products
SAP_SE · SAP NetWeaver Business Warehouse (CCAW application)