Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-42918 EUVD-2025-27207GHSA-w83c-pf6r-m68g

Missing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing)

Published Sep 9, 2025 · Updated Sep 9, 2025 · Assigned by sap

Description

SAP NetWeaver Application Server for ABAP allows authenticated users with access to background processing to gain unauthorized read access to profile parameters. This results in a low impact on confidentiality, with no impact on integrity or availability

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver Application Server for ABAP (Background Processing) SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816 —

Advisories 2

References