CVE-2025-0067

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published Jan 14, 2025
CWE ID 862

Summary

CVE-2025-0067 is a vulnerability affecting the SAP NetWeaver Application Server Java. This issue arises due to a missing authorization check on service endpoints, enabling standard users to create JCo connection entries. These entries facilitate remote function calls to or from the application server. Though the impact is relatively low, it can potentially compromise confidentiality, integrity, and availability of the affected application.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SAP Netweaver Application Server Java

Affected Vendors

  • SAP SE

Advisories, Assessments, and Mitigations