PT-2025-15377 · Sap · Sap Netweaver

Published 2025-04-08 · Updated 2025-04-09 · CVE-2025-31331

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver (affected versions not specified)

Description: The issue allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once connected to the ABAP system, the attacker can execute a specific transaction that exposes sensitive system code without proper authorization, compromising the confidentiality.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2025-04842

CVE-2025-31331

Affected Products

Sap Netweaver

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-31331 · Security Note
• https://bdu.fstec.ru/vul/2025-04842 · Security Note
• https://me.sap.com/notes/3577131 · Note
• https://t.me/cvetracker/21100 · Telegram Post
• https://twitter.com/CVEnew/status/1909528289154302238 · Twitter Post
• https://twitter.com/cybercronai/status/1909897931936715259 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://t.me/cvedetector/22423 · Telegram Post