CVE-2025-31331 | BDVDB-2026-274178 Detail
SAP_SESAP NetWeaver
Description#
SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitive system code without proper authorization. This vulnerability compromises the confidentiality.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-863 Incorrect Authorization
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.