CVE-2025-0070
Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform
- State
- Published
- Severity
- 9.9 Critical
- Published
- Jan 14, 2025
- Updated
- Jan 14, 2025
- Reserved
- Dec 11, 2024
Description
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to obtain illegitimate access to the system by exploiting improper authentication checks, resulting in privilege escalation. On successful exploitation, this can result in potential security concerns. This results in a high impact on confidentiality, integrity, and availability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.9 Critical | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | sap |
Weaknesses
- CWE-287 (Improper Authentication)
Affected Products
| Product | Versions |
|---|---|
SAP NetWeaver Application Server for ABAP and ABAP PlatformSAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.