CVE-2025-0070: Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform
First published: Tue Jan 14 2025(Updated: )
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to obtain illegitimate access to the system by exploiting improper authentication checks, resulting in privilege escalation. On successful exploitation, this can result in potential security concerns. This results in a high impact on confidentiality, integrity, and availability.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver AS ABAP Kernel | ||
| SAP ABAP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-0070?
CVE-2025-0070 has been classified as a critical vulnerability due to its potential for privilege escalation.
How do I fix CVE-2025-0070?
To mitigate CVE-2025-0070, apply the latest security patches provided by SAP for the affected products.
What are the affected versions for CVE-2025-0070?
CVE-2025-0070 affects SAP NetWeaver Application Server for ABAP and SAP ABAP Platform without specifying particular versions.
Who can exploit CVE-2025-0070?
CVE-2025-0070 can be exploited by authenticated attackers who are able to bypass improper authentication checks.
What potential impact can CVE-2025-0070 have on an organization?
Exploitation of CVE-2025-0070 can lead to unauthorized access and privilege escalation within the affected SAP systems.
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/severity
- agent/author
- agent/weakness
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap netweaver as abap kernel
- canonical/sap abap