by Kastro CVE-2025-0066
SAP_SE SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) — Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)
Description · from the CVE record
Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) allows an attacker to access restricted information due to weak access controls. This can have a significant impact on the confidentiality, integrity, and availability of an application
Affected
ProductAffectedFixed inSource
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 700–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 701–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 702–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 731–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 740–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 750–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 751–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 752–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 753–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 754–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 755–CNA
SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)SAP_BASIS 756–CNA
Scores by source
sap (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total