CVE-2025-23194CWE-306

Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component)

Medium · published March 11, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

SAP NetWeaver Enterprise Portal OBN does not perform proper authentication check for a particular configuration setting. As result, a non-authenticated user can set it to an undesired value causing low impact on integrity. There is no impact on confidentiality or availability of the application.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00319 · 23.6th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-03-11T00:32Z
EPSS history
Timeline
  • 11 MAR 00:32Z
    Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component)
    cvelistv5