Количество 3
Количество 3
CVE-2025-42936
The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in the barcode interface, leading to privilege escalation. This results in a low impact on the confidentiality and integrity of the application, there is no impact on availability.
GHSA-x5gw-xjgf-g6gh
The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in the barcode interface, leading to privilege escalation. This results in a low impact on the confidentiality and integrity of the application, there is no impact on availability.
BDU:2025-16307
Уязвимость программной интеграционной платформы SAP NetWeaver Application Server ABAP, связанная с некорректным присваиванием привилегий, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-42936 The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in the barcode interface, leading to privilege escalation. This results in a low impact on the confidentiality and integrity of the application, there is no impact on availability. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
| GHSA-x5gw-xjgf-g6gh The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in the barcode interface, leading to privilege escalation. This results in a low impact on the confidentiality and integrity of the application, there is no impact on availability. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
 | BDU:2025-16307 Уязвимость программной интеграционной платформы SAP NetWeaver Application Server ABAP, связанная с некорректным присваиванием привилегий, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу