Authorization Flaw in SAP NetWeaver Application Server ABAP
CVE-2025-0068

Currently unrated

Key Information:

Vendor
SAP
Vendor
CVE Published:
14 January 2025

Summary

An obsolete feature in SAP NetWeaver Application Server ABAP lacks essential authorization checks, enabling authenticated attackers to access sensitive information that should remain restricted. This vulnerability does not compromise the integrity or availability of the application but poses risks related to confidential data exposure.

References

https://me.sap.com/notes/3550674
https://url.sap/sapsecuritypatchday

Timeline

  • Vulnerability published

.