What’s Vulnerable › Vulnerabilities
CVE-2025-42947: Code Injection vulnerability in SAP FICA ODN framework
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-23 · updated 2026-06-17
- Weakness: CWE-94
Description
SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on confidentiality of the application.
Affected products
- SAP_SE SAP FICA ODN framework: SAPSCORE 132, S4CORE 102, 103, 104, 105, 106 (+6)
References
Get alerted when CVE-2025-42947 or the next vulnerability affects your stack