CVE-2025-27428
CVSS 3.1 Score 7.7 of 10 (high)
Details
Published Apr 8, 2025
CWE ID 862
Summary
CVE-2025-27428 is a directory traversal vulnerability affecting SAP Solution Manager. An attacker, with authorized access, can exploit this RFC-enabled function module to gain access to critical information from connected systems. The impact of this vulnerability is high due to the potential loss of confidential data, with no reported impact on system integrity or availability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Sap Netweaver Application Server Abap
Affected Vendors
- SAP SE