CVE-2025-0053: SAP Basis

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a specific URL parameter, an unauthenticated attacker could retrieve details such as system configuration. This has a limited impact on the confidentiality of the application and may be leveraged to facilitate further attacks or exploits.

Affected products

• SAP SAP Basis: version 700 only; version 701 only; version 702 only; version 731 only; version 740 only; version 750 only; …

Published 2025-01-14. Last modified 2026-06-17.