CVE-2025-0068CWE-862

Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP

Medium · published January 14, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
19.2
In the wild
Unconfirmed
What it is

An obsolete functionality in SAP NetWeaver Application Server ABAP did not perform necessary authorization checks. Because of this, an authenticated attacker could obtain information that would otherwise be restricted. It has no impact on integrity or availability on the application.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00278 · 19.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-01-14T00:09Z
EPSS history
Timeline
  • 14 JAN 00:09Z
    Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP
    cvelistv5