Boletines de Vulnerabilidades

CVE-2025-27437

   
Software afectado SAP
 
A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server ABAP. Because of this, an attacker authenticated as a non-administrative user can initiate a transaction, allowing them to access but not modify non-sensitive data without further authorization and with no effect on availability.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-27437