CVE-2025-30015 — Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)

CVE-2025-30015

Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) PUBLISHED

Description (CNA)

Due to incorrect memory address handling in ABAP SQL of SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker with high privileges could execute certain forms of SQL queries leading to manipulation of content in the output variable. This vulnerability has a low impact on the confidentiality, integrity and the availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver and ABAP Platform (Application Server ABAP)	affected KRNL64UC 7.53; affected KERNEL 7.53; affected 7.54

CWE

CWE-787

References

https://me.sap.com/notes/3565944
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.