What’s Vulnerable › Vulnerabilities

CVE-2025-0066: Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-14 · updated 2026-06-17
• Weakness: CWE-732

Description

Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) allows an attacker to access restricted information due to weak access controls. This can have a significant impact on the confidentiality, integrity, and availability of an application

Affected products

• SAP_SE SAP Business Workflow: 700, 701, 702, 731, 740, 750 (+11)

References

• https://me.sap.com/notes/3550708
• https://url.sap/sapsecuritypatchday

Get alerted when CVE-2025-0066 or the next vulnerability affects your stack