Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2025-42954

Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on availability of the application, there is no impact on confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver Business Warehouse (CCAW application)

Default version status: unaffected

  • DW4CORE 100affected
  • 200affected
  • 300affected
  • 400affected
  • SAP_BW 700affected
  • 701affected
  • 702affected
  • 731affected
  • 740affected
  • 750affected
  • 751affected
  • 752affected
  • 753affected
  • 754affected
  • 755affected
  • 756affected
  • 757affected
  • 758affected
  • 816affected
  • SAP_BW_VIRTUAL_COMP 701affected

References