PT-2025-15375 · Sap · Sap Solution Manager

Published 2025-04-08 · Updated 2025-04-08 · CVE-2025-30017

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions: SAP Solution Manager version 7.1

Description: The issue is caused by a missing authorization check, allowing an authenticated attacker to upload a file as a template for solution documentation. This can lead to limited impact on the integrity and availability of the application.

Recommendations: For SAP Solution Manager version 7.1, apply the necessary security patches or updates to include authorization checks for file uploads. As a temporary workaround, consider restricting access to the file upload feature for solution documentation templates until a patch is available.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2025-04837

CVE-2025-30017

Affected Products

Sap Solution Manager

References · 7

• https://bdu.fstec.ru/vul/2025-04837 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-30017 · Security Note
• https://t.me/cvedetector/22421 · Telegram Post
• https://t.me/cvetracker/21098 · Telegram Post
• https://me.sap.com/notes/3558864 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/1909528290949578838 · Twitter Post