CVE-2025-23190CWE-862

Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI)

Medium · published February 11, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

Due to missing authorization check, an authenticated attacker could call a remote-enabled function module which allows them to access data that they would otherwise not have access to. The attacker cannot modify data or impact the availability of the system.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.7th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-02-11T00:35Z
EPSS history
Timeline
  • 11 FEB 00:35Z
    Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI)
    cvelistv5