RCE in Sap Se Fica Odn Framework
CVE-2025-42947
SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on confidentiality of the application.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.003 (21.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L.
Affected products
- Sap_se Sap Fica Odn Framework — versions SAPSCORE 132, S4CORE 102, 103
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-42947?
- CVE-2025-42947 is a medium-severity vulnerability in Sap Se Fica Odn Framework, classified under Code Injection. CVSS score: 5.5/10. Published 2025-07-23.
- How severe is CVE-2025-42947?
- Medium severity. CVSS v3 base score is 5.5 out of 10.