Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitive system code without proper authorization. This vulnerability compromises the confidentiality.

CVSS 1 Total

ScoreSeverityVersionVector String
4.3MEDIUM3.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Product Status

Learn more

Versions 15 Total

Default Status: unaffected

affected

Authorized Data Publishers