5.3

CVE-2025-0053

Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform

SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a specific URL parameter, an unauthenticated attacker could retrieve details such as system configuration. This has a limited impact on the confidentiality of the application and may be leveraged to facilitate further attacks or exploits.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Sap Basis Version 700
SAP ≫ Sap Basis Version 701
SAP ≫ Sap Basis Version 702
SAP ≫ Sap Basis Version 731
SAP ≫ Sap Basis Version 740
SAP ≫ Sap Basis Version 750
SAP ≫ Sap Basis Version 751
SAP ≫ Sap Basis Version 752
SAP ≫ Sap Basis Version 753
SAP ≫ Sap Basis Version 754
SAP ≫ Sap Basis Version 755
SAP ≫ Sap Basis Version 756
SAP ≫ Sap Basis Version 757
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.263
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
SAP 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-209 Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

https://url.sap/sapsecuritypatchday
Patch
https://me.sap.com/notes/3536461
Permissions Required