Missing Authorization Check in SAP NetWeaver Application Server Java
CVE-2025-0067

Currently unrated

Key Information:

Vendor

SAP
Vendor
CVE Published:
14 January 2025

What is CVE-2025-0067?

This vulnerability in the SAP NetWeaver Application Server Java arises from a missing authorization check on service endpoints, which allows an attacker with a standard user role to create JCo connection entries. These entries facilitate remote function calls to and from the application server, potentially jeopardizing the confidentiality, integrity, and availability of the application by enabling unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://me.sap.com/notes/3540108
https://url.sap/sapsecuritypatchday

Timeline

  • Vulnerability published

JSON
.