What’s Vulnerable › Vulnerabilities

CVE-2025-42944: Insecure Deserialization vulnerability in SAP Netweaver (RMI-P4)

• Severity: critical (CVSS 10.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-09 · updated 2026-10-18
• Weakness: CWE-502

Description

Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution, posing a high impact to the application's confidentiality, integrity, and availability.

Affected products

• SAP_SE SAP Netweaver (RMI-P4): SERVERCORE 7.50

References

• https://me.sap.com/notes/3634501
• https://me.sap.com/notes/3660659
• https://me.sap.com/notes/3670067
• https://url.sap/sapsecuritypatchday

Get alerted when CVE-2025-42944 or the next vulnerability affects your stack