SAP NetWeaver AS Java EDM Application has a vulnerability where it does not perform authentication checks for certain web service requests. This allows an unauthenticated attacker to send crafted requests and retrieve sensitive business information, impacting confidentiality. There is no effect on integrity or availability.