cbcvebase.
CVE-2025-0063
published 2025-01-14

CVE-2025-0063: SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with…

PriorityP357high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.73%
50.3th percentile
SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with basic user privileges to gain control over the data in Informix database, leading to complete compromise of confidentiality, integrity and availability.

Affected

28 ranges· showing 25
VendorProductVersion rangeFixed in
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sapsap_basis——
sap_sesap_netweaver_as_abap_and_abap_platform——
sap_sesap_netweaver_as_abap_and_abap_platform——
sap_sesap_netweaver_as_abap_and_abap_platform——
sap_sesap_netweaver_as_abap_and_abap_platform——
sap_sesap_netweaver_as_abap_and_abap_platform——
sap_sesap_netweaver_as_abap_and_abap_platform——
sap_sesap_netweaver_as_abap_and_abap_platform——
sap_sesap_netweaver_as_abap_and_abap_platform——
sap_sesap_netweaver_as_abap_and_abap_platform——
sap_sesap_netweaver_as_abap_and_abap_platform——
sap_sesap_netweaver_as_abap_and_abap_platform——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.