CVE-2025-42918

概要

参考情報

• me.sap.com/notes/3623504 · Permissions Required
• url.sap/sapsecuritypatchday · Patch

sap basis のその他の脆弱性

• CVE-2026-24312中 5.2An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authenticated administrative user can bypass rol…
• CVE-2026-23687高 8.8SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed mes…
• CVE-2026-0484中 6.5Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specif…
• CVE-2025-42911中 4.3SAP NetWeaver (Service Data Download) allows an authenticated user to call a remote-enabled function module, which could grant access to inf…
• CVE-2025-42936中 5.4The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user rol…