Description
Due to missing authorization check, an authenticated attacker could call a remote-enabled function module which allows them to access data that they would otherwise not have access to. The attacker cannot modify data or impact the availability of the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP NetWeaver and ABAP platform (ST-PI) | ST-PI 2008_1_700, ST-PI 2008_1_710, ST-PI 740 | — |
Advisories 2
- NCSC-2025-0045 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Feb 11, 2025
- WID-SEC-2025-0307 SAP Patchday Februar 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 10, 2025