CVE-2025-0058 — Information Disclosure vulnerability in SAP Business Workflow and SAP Flexible Workflow

CVE-2025-0058

Information Disclosure vulnerability in SAP Business Workflow and SAP Flexible Workflow PUBLISHED

Description (CNA)

In SAP Business Workflow and SAP Flexible Workflow, an authenticated attacker can manipulate a parameter in an otherwise legitimate resource request to view sensitive information that should otherwise be restricted. The attacker does not have the ability to modify the information or to make the information unavailable.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Business Workflow and SAP Flexible Workflow	affected SAP_BASIS 753; affected SAP_BASIS 754; affected SAP_BASIS 755; affected SAP_BASIS 756; affected SAP_BASIS 757; affected SAP_BASIS 758; affected SAP_BASIS 912; affected SAP_BASIS 913; affected SAP_BASIS 914

CWE

CWE-639

References

https://me.sap.com/notes/3542698
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.