Unauthorized Access Vulnerability in SAP ABAP Platform by SAP
CVE-2025-24872

4.3MEDIUM

Key Information:

Vendor

SAP
Status
SAP Abap Platform (abap Build Framework)
Vendor
CVE Published:
11 February 2025

What is CVE-2025-24872?

The ABAP Build Framework in SAP ABAP Platform is susceptible to an issue that enables an authenticated attacker to gain unauthorized access to specific transactions. By leveraging the add-on build functionality within the framework, an attacker can invoke certain transactions and inspect their details. Although this vulnerability poses a risk to confidentiality, it does not compromise the integrity or availability of the application.

Affected Version(s)

SAP ABAP Platform (ABAP Build Framework) SAP_BASIS 750

SAP ABAP Platform (ABAP Build Framework) SAP_BASIS 751

SAP ABAP Platform (ABAP Build Framework) SAP_BASIS 752

References

https://me.sap.com/notes/3553753
https://url.sap/sapsecuritypatchday

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.