Riskcovery

CVE-2025-42947

Code Injection vulnerability in SAP FICA ODN framework

State
Published
Severity
5.5 Medium
Published
Jul 23, 2025
Updated
Jul 23, 2025
Reserved
Apr 16, 2025

Read the record on cve.org

Description

SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on confidentiality of the application.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Lsap

Weaknesses

  • CWE-94 Improper Control of Generation of Code

Affected Products

ProductVersions
SAP FICA ODN frameworkSAP_SE
  • SAPSCORE 132Affected
  • S4CORE 102Affected
  • 103Affected
  • 104Affected
  • 105Affected
  • 106Affected
  • 107Affected
  • 108Affected
  • FI-CA 606Affected
  • 616Affected
  • 617Affected
  • 618Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.