CVE-2025-0053: Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a specific URL parameter, an unauthenticated attacker could retrieve details such as system configuration. This has a limited impact on the confidentiality of the application and may be leveraged to facilitate further attacks or exploits.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What systems are affected by CVE-2025-0053?
CVE-2025-0053 affects the SAP NetWeaver Application Server for ABAP and the SAP ABAP Platform.
What is the severity of CVE-2025-0053?
The severity of CVE-2025-0053 is considered limited as it allows unauthorized access to system configuration details.
How do I fix CVE-2025-0053?
To fix CVE-2025-0053, apply the latest security patches and updates provided by SAP for the affected software.
What kind of access does an attacker gain through CVE-2025-0053?
An attacker can gain unauthorized access to system information such as system configuration using a specific URL parameter.
Can CVE-2025-0053 be exploited by authenticated users?
No, CVE-2025-0053 can be exploited by unauthenticated attackers.