CVE-2025-31331CWE-863

Authorization Bypass vulnerability in SAP NetWeaver

Medium · published April 8, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitive system code without proper authorization. This vulnerability compromises the confidentiality.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-04-08T07:15Z
EPSS history
Timeline
  • 08 APR 07:15Z
    Authorization Bypass vulnerability in SAP NetWeaver
    cvelistv5