CVE-2025-0063

8.8 highEPSS 0.7%

High (8.8) in sap sap basis. EPSS 0.7% chance of exploitation in the next 30 days.

SAP NetWeaver AS ABAP and ABAP Platform does not check for authorization when a user executes some RFC function modules. This could lead to an attacker with basic user privileges to gain control over the data in Informix database, leading to complete compromise of confidentiality, integrity and availability.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sap:sap_basis

References

https://me.sap.com/notes/3550816
https://url.sap/sapsecuritypatchday

Check your stack JSON