CVE-2025-24872 — Missing Authorization check in SAP ABAP Platform (ABAP Build Framework)

Description (CNA)

The ABAP Build Framework in SAP ABAP Platform allows an authenticated attacker to gain unauthorized access to a specific transaction. By executing the add-on build functionality within the ABAP Build Framework, an attacker could call the transaction and view its details. This has a limited impact on the confidentiality of the application with no effect on the integrity and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP ABAP Platform (ABAP Build Framework)	affected SAP_BASIS 750; affected SAP_BASIS 751; affected SAP_BASIS 752; affected SAP_BASIS 753; affected SAP_BASIS 754; affected SAP_BASIS 755; affected SAP_BASIS 756; affected SAP_BASIS 757; affected SAP_BASIS 758

CWE

CWE-863

References

https://me.sap.com/notes/3553753
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.