← CVE Intelligence

CVE-2025-31331

Authorization Bypass vulnerability in SAP NetWeaver PUBLISHED

Description (CNA)

SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitive system code without proper authorization. This vulnerability compromises the confidentiality.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP NetWeaveraffected SAP_ABA 700; affected 701; affected 702; affected 731; affected 740; affected 750; affected 751; affected 752; affected 75C; affected 75D; affected 75E; affected 75F; affected 75G; affected 75H; affected 75I

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.