SAP NetWeaver Application Server for ABAP vulnerabilities

2 known vulnerabilities in SAP NetWeaver Application Server for ABAP from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  SAP NetWeaver Application Server for ABAP: Missing Authorization

  CVE-2025-42953Jul 8, 2025SAP

  SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This could completely compromise the integrity and availability with no impact on confidentiality of the system

• 9.6 Critical severity

  SAP NetWeaver Application Server for ABAP: Missing Authorization

  CVE-2025-42989Jun 10, 2025SAP

  RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of the application.