CVE-2019-0257: SAP NetWeaver Application Server Abap

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

• SAP NetWeaver Application Server Abap: from 7.0, up to and including 7.02; from 7.50, up to and including 7.53; version 7.30 only; version 7.31 only; version 7.40 only
• SAP NetWeaver As Abap: from 7.10, up to and including 7.11; from 7.74, up to and including 7.75

Published 2019-02-15. Last modified 2026-06-17.