Security Advisory

CVE-2025-31331

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-08 07:15:23
Last updated 2025-04-08 13:15:55
Assigner sap
State PUBLISHED

Description

SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitive system code without proper authorization. This vulnerability compromises the confidentiality.