Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-42947

Code Injection vulnerability in SAP FICA ODN framework

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on confidentiality of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP FICA ODN framework

Default version status: unaffected

  • SAPSCORE 132affected
  • S4CORE 102affected
  • 103affected
  • 104affected
  • 105affected
  • 106affected
  • 107affected
  • 108affected
  • FI-CA 606affected
  • 616affected
  • 617affected
  • 618affected

References