Loading vulnerability…
Code Injection in SAP FICA ODN framework
CVE-2025-42947 is a code injection vulnerability in the SAP FICA ODN framework. The flaw allows a highly privileged user to inject a value into a local variable that is subsequently executed by the application. This enables manipulation of application logic and runtime behavior through attacker-controlled input reaching an executable context. The vulnerability affects integrity primarily by allowing unauthorized modification of application behavior, with limited availability impact and no stated confidentiality impact.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker with high privileges to alter the behavior of the SAP FICA ODN framework by causing execution of injected values within the application context. The documented security impact is high on integrity, low on availability, and none on confidentiality.
If you can’t patch tonight, do this now.
No specific workaround is described in the available information. If immediate patching is not possible, restrict access to highly privileged roles capable of interacting with the vulnerable functionality, review and minimize privileged assignments, and monitor for abnormal changes in application behavior until the vendor fix can be applied.
Patch, then assume compromise.
Apply the SAP security update associated with CVE-2025-42947 for the affected SAP FICA ODN framework version. Upgrade or patch to the vendor-corrected release level identified in the relevant SAP Security Note.
No public exploits tracked yet. Mallory keeps watching.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.