Authorization Bypass in SAP NetWeaver Application Server for ABAP

CVE-2025-42882

What is CVE-2025-42882?

A vulnerability exists in SAP NetWeaver Application Server for ABAP, where an authenticated attacker with basic privileges can exploit a missing authorization check. By executing a specific function module, the attacker could retrieve sensitive technical information from the system. This exposure of environment details may facilitate further malicious actions, highlighting the importance of robust security measures to protect sensitive data.

References