CVE-2025-23190 — Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI)

CVE-2025-23190

Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI) PUBLISHED

Description (CNA)

Due to missing authorization check, an authenticated attacker could call a remote-enabled function module which allows them to access data that they would otherwise not have access to. The attacker cannot modify data or impact the availability of the system.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver and ABAP platform (ST-PI)	affected ST-PI 2008_1_700; affected ST-PI 2008_1_710; affected ST-PI 740

CWE

CWE-862

References

https://me.sap.com/notes/3547581
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.