PT-2025-1182 · Sap · Sap Netweaver Application Server Abap

Published 2025-01-14 · Updated 2025-01-14 · CVE-2025-0068

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP (affected versions not specified)

Description The issue is related to an obsolete functionality in SAP NetWeaver Application Server ABAP that did not perform necessary authorization checks. This allows an authenticated attacker to obtain information that would otherwise be restricted. The issue has no impact on the integrity or availability of the application. It is associated with a lack of authorization, which can be exploited by a remote attacker to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2025-00465

CVE-2025-0068

Affected Products

Sap Netweaver Application Server Abap

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-0068 · Security Note
• https://bdu.fstec.ru/vul/2025-00465 · Security Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2025.html · Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 · Note
• https://me.sap.com/notes/3550674 · Note
• https://twitter.com/VulmonFeeds/status/1879075284529320405 · Twitter Post
• https://twitter.com/CVEnew/status/1878988101952909330 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://t.me/cvedetector/15217 · Telegram Post