CVE-2025-0053

SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to gain unauthorized access to system information. By using a specific URL parameter, an unauthenticated attacker could retrieve details such as system configuration. This has a limited impact on the confidentiality of the application and may be leveraged to facilitate further attacks or exploits.

• CWE-209

• https://me.sap.com/notes/3536461Permissions Required
• https://url.sap/sapsecuritypatchdayPatch

Published

Jan 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0045Improper Input validation in the AMD Secure Processor (ASP) …6.9
• CVE-2025-0046Incorrect directory permissions could allow a local user to …7
• CVE-2025-0049When a Web User without Create permission on subfolders atte…4.3
• CVE-2025-0050Improper Restriction of Operations within the Bounds of a Me…5.9
• CVE-2025-0051Improper input validation performed during the authenticatio…8.7
• CVE-2025-0052Improper input validation performed during the authenticatio…8.3
• CVE-2025-0054SAP NetWeaver Application Server Java does not sufficiently …5.4
• CVE-2025-0055SAP GUI for Windows stores user input on the client PC to im…6
• CVE-2025-0056SAP GUI for Java saves user input on the client PC to improv…6
• CVE-2025-0057SAP NetWeaver AS JAVA (User Admin Application) is vulnerable…4.8
• CVE-2025-0058In SAP Business Workflow and SAP Flexible Workflow, an authe…6.5
• CVE-2025-0059Applications based on SAP GUI for HTML in SAP NetWeaver Appl…6