CVE-2025-0068 — Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP
An obsolete functionality in SAP NetWeaver Application Server ABAP did not perform necessary authorization checks. Because of this, an authenticated attacker could obtain inform…
Published: 2025-01-14 · CVSS: 4.3 · CVSS 3.1
An obsolete functionality in SAP NetWeaver Application Server ABAP did not perform necessary authorization checks. Because of this, an authenticated attacker could obtain information that would otherwise be restricted. It has no impact on integrity or availability on the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7