CVE-2025-30017: Missing Authorization check in SAP Solution Manager
Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After successful exploitation, an attacker can cause limited impact on the integrity and availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30017?
CVE-2025-30017 is classified as a moderate severity vulnerability due to the potential impact on integrity and availability of the application.
How do I fix CVE-2025-30017?
To fix CVE-2025-30017, apply the latest security patches provided by SAP for Solution Manager 7.1.
Who can exploit CVE-2025-30017?
CVE-2025-30017 can be exploited by authenticated attackers who can upload files without proper authorization checks.
What systems are affected by CVE-2025-30017?
CVE-2025-30017 affects SAP Solution Manager 7.1 specifically.
What type of attack is associated with CVE-2025-30017?
CVE-2025-30017 is associated with file upload attacks due to unauthorized access.