SAP ICF: Missing Auth Checks Allow Token Replay Auth Bypass
CVE-2025-42875 Published on December 9, 2025

Missing Authentication check in SAP NetWeaver Internet Communication Framework
The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, violating secure authentication practices causing low impact on Confidentiality, Integrity and Availability of the application.

NVD

Vulnerability Analysis

CVE-2025-42875 can be exploited with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

HIGH

User Interaction:

NONE

Scope:

CHANGED

Confidentiality Impact:

LOW

Integrity Impact:

LOW

Availability Impact:

LOW

Weakness Type

Missing Authentication for Critical Function

The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Products Associated with CVE-2025-42875

Want to know whenever a new CVE is published for SAP NetWeaver? stack.watch will email you.

SAP NetWeaver

Affected Versions

SAP_SE SAP NetWeaver Internet Communication Framework:

Version SAP_BASIS 700 is affected.
Version SAP_BASIS 701 is affected.
Version SAP_BASIS 702 is affected.
Version SAP_BASIS 731 is affected.
Version SAP_BASIS 740 is affected.
Version SAP_BASIS 750 is affected.
Version SAP_BASIS 751 is affected.
Version SAP_BASIS 752 is affected.
Version SAP_BASIS 753 is affected.
Version SAP_BASIS 754 is affected.
Version SAP_BASIS 755 is affected.
Version SAP_BASIS 756 is affected.
Version SAP_BASIS 757 is affected.
Version SAP_BASIS 758 is affected.

Exploit Probability

EPSS

0.07%

Percentile

20.52%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.