What’s Vulnerable › Vulnerabilities
CVE-2025-23190: Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI)
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-02-11 · updated 2026-06-17
- Weakness: CWE-862
Description
Due to missing authorization check, an authenticated attacker could call a remote-enabled function module which allows them to access data that they would otherwise not have access to. The attacker cannot modify data or impact the availability of the system.
Affected products
- SAP_SE SAP NetWeaver and ABAP platform (ST-PI): ST-PI 2008_1_700, ST-PI 2008_1_710, ST-PI 740
References
Get alerted when CVE-2025-23190 or the next vulnerability affects your stack