VULNERABILITY INTELLIGENCE
CVE-2025-31331
CVSS score4.3 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2025-04-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitive system code without proper authorization. This vulnerability compromises the confidentiality.
Weakness classification
- cna@sap.com: CWE-863