Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2025-42885

Missing authentication in SAP HANA 2.0 (hdbrss)

Description

Due to missing authentication, SAP HANA 2.0 (hdbrss) allows an unauthenticated attacker to call a remote-enabled function that will enable them to view information. As a result, it has a low impact on the confidentiality but no impact on the integrity and availability of the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP HANA 2.0 (hdbrss)

Default version status: unaffected

  • HDB 2.00affected

References