Riskcovery

CVE-2025-42954

Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)

State
Published
Severity
2.7 Low
Published
Jul 8, 2025
Updated
Jul 8, 2025
Reserved
Apr 16, 2025

Read the record on cve.org

Description

SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on availability of the application, there is no impact on confidentiality and integrity.

Scores

CVSSScoreVectorSource
3.12.7 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Lsap

Weaknesses

  • CWE-835 Loop with Unreachable Exit Condition

Affected Products

ProductVersions
SAP NetWeaver Business Warehouse (CCAW application)SAP_SE
  • DW4CORE 100Affected
  • 200Affected
  • 300Affected
  • 400Affected
  • SAP_BW 700Affected
  • 701Affected
  • 702Affected
  • 731Affected
  • 740Affected
  • 750Affected
  • 751Affected
  • 752Affected
  • 753Affected
  • 754Affected
  • 755Affected
  • 756Affected
  • 757Affected
  • 758Affected
  • 816Affected
  • SAP_BW_VIRTUAL_COMP 701Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.