CVE-2025-0070: Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to obtain illegitimate access to the system by exploiting improper authentication checks, resulting in privilege escalation. On successful exploitation, this can result in potential security concerns. This results in a high impact on confidentiality, integrity, and availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0070?
CVE-2025-0070 has been classified as a critical vulnerability due to its potential for privilege escalation.
How do I fix CVE-2025-0070?
To mitigate CVE-2025-0070, apply the latest security patches provided by SAP for the affected products.
What are the affected versions for CVE-2025-0070?
CVE-2025-0070 affects SAP NetWeaver Application Server for ABAP and SAP ABAP Platform without specifying particular versions.
Who can exploit CVE-2025-0070?
CVE-2025-0070 can be exploited by authenticated attackers who are able to bypass improper authentication checks.
What potential impact can CVE-2025-0070 have on an organization?
Exploitation of CVE-2025-0070 can lead to unauthorized access and privilege escalation within the affected SAP systems.