Description
Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the confidentiality, integrity, and availability of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP NetWeaver | KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.53, KERNEL 7.22, 7.54 | — |
Advisories 2
- WID-SEC-2025-1989 SAP Patchday September 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 23, 2025
- NCSC-2025-0275 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Sep 9, 2025