CVE-2025-23187 — Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)

CVE-2025-23187

Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) PUBLISHED

Description (CNA)

Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an unauthenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver and ABAP Platform (SDCCN)	affected ST-PI 2008_1_700; affected ST-PI 2008_1_710; affected ST-PI 740

CWE

CWE-862

References

https://me.sap.com/notes/3546470
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.