SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a specific URL parameter, an unauthenticated attacker could retrieve details such as system configuration. This has a limited impact on the confidentiality of the application and may be leveraged to facilitate further attacks or exploits.
References
| Link | Resource |
|---|---|
| https://me.sap.com/notes/3536461 | Permissions Required |
| https://url.sap/sapsecuritypatchday | Patch |
Configurations
Configuration 1 (hide)
|
History
24 Oct 2025, 19:24
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://me.sap.com/notes/3536461 - Permissions Required | |
| References | () https://url.sap/sapsecuritypatchday - Patch | |
| CPE | cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:* cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:* |
|
| First Time |
Sap sap Basis
Sap |
|
| Summary |
|
14 Jan 2025, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-14 01:15
Updated : 2025-10-24 19:24
NVD link : CVE-2025-0053
Mitre link : CVE-2025-0053
CVE.ORG link : CVE-2025-0053
JSON object : View
Products Affected
sap
- sap_basis
CWE
CWE-209
Generation of Error Message Containing Sensitive Information