SAP-3550674 — Vulnetix

SAP-3550674 PUBLISHED

Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP Product: SAP NetWeaver Application Server ABAP, Versions - SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 Severity: Medium (CVSS 4.3)

Timeline

Jan 1, 2025 CVE Published

References

Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP advisory
https://support.sap.com/en/my-support/knowledge-base/security-notes-news/bulletin-2025.html advisory
https://www.cve.org/CVERecord?id=CVE-2025-0068 advisory

Open in Interactive Console →