CVE-2025-23194 — Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component)

CVE-2025-23194

Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component) PUBLISHED

Description (CNA)

SAP NetWeaver Enterprise Portal OBN does not perform proper authentication check for a particular configuration setting. As result, a non-authenticated user can set it to an undesired value causing low impact on integrity. There is no impact on confidentiality or availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver Enterprise Portal (OBN component)	affected EP-RUNTIME 7.50

CWE

CWE-306

References

https://me.sap.com/notes/3561792
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.