Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-24872

Missing Authorization check in SAP ABAP Platform (ABAP Build Framework)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

The ABAP Build Framework in SAP ABAP Platform allows an authenticated attacker to gain unauthorized access to a specific transaction. By executing the add-on build functionality within the ABAP Build Framework, an attacker could call the transaction and view its details. This has a limited impact on the confidentiality of the application with no effect on the integrity and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP ABAP Platform (ABAP Build Framework)

Default version status: unaffected

  • SAP_BASIS 750affected
  • SAP_BASIS 751affected
  • SAP_BASIS 752affected
  • SAP_BASIS 753affected
  • SAP_BASIS 754affected
  • SAP_BASIS 755affected
  • SAP_BASIS 756affected
  • SAP_BASIS 757affected
  • SAP_BASIS 758affected

References