← Back

CVE-2025-0053

nvd nist
Published: Jan 14, 2025Modified: Oct 24, 2025

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: CNA (Secondary)

Description

SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a specific URL parameter, an unauthenticated attacker could retrieve details such as system configuration. This has a limited impact on the confidentiality of the application and may be leveraged to facilitate further attacks or exploits.

Affected (13)

Products: Sap: Sap Basis
1 product
Sap Basis
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Sap
Version 700
Version 701
Version 702
Version 731
Version 740
Version 750
Version 751
Version 752
Version 753
Version 754
Version 755
Version 756
Version 757

References (2)

Source: cna@sap.com
Permissions Required
Source: cna@sap.com
Patch

Timeline

No history available yet.