CVE-2025-23189: Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)
Published Feb 11, 2025
·Updated
Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an authenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability
Affected Software
2 affected components
SAP NetWeaver
SAP ABAP Platform
Event History
Feb 11, 2025
CVE Published
via MITRE·12:33 AM
Data Sourced
via MITRE·12:33 AM
DescriptionSeverity
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-23189?
CVE-2025-23189 has a low impact on integrity due to a missing authorization check.
2
How do I fix CVE-2025-23189?
To fix CVE-2025-23189, apply the relevant security patches provided by SAP.
3
What software is affected by CVE-2025-23189?
CVE-2025-23189 affects SAP NetWeaver and SAP ABAP Platform.
4
What type of attack can be conducted due to CVE-2025-23189?
An authenticated attacker can exploit CVE-2025-23189 to generate technical meta-data.
5
Does CVE-2025-23189 affect confidentiality or availability?
CVE-2025-23189 does not have any impact on confidentiality or availability.