CVE-2014-3130: SAP NetWeaver Abap Application Server

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The ABAP Help documentation and translation tools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages.

Affected products

• SAP NetWeaver Abap Application Server: affected versions not specified

Published 2014-04-30. Last modified 2026-06-17.