← Vulnerability feed

Vulnerability record · CVE-2025-42874 · published 9 December 2025

CVE-2025-42874: SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execut…

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to service disruption or unauthorized system control. This has high impact on integrity and availability, with no impact on confidentiality.

7.9 CVSS 3.1 High EPSS 0.47% · top 61.9% CWE-405 · CWE-405 Deferred
7.9CVSS 3.1 base score
0.47%EPSS exploitation probability, 30 days
NoNot in CISA KEV
0Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to service disruption or unauthorized system control. This has high impact on integrity and availability, with no impact on confidentiality.

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:H

References

LinkTags
https://me.sap.com/notes/3640185
https://url.sap/sapsecuritypatchday

Track CVE-2025-42874 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2025-42874), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.