Vulnerabilities fixed in SAP Products

🗓️ 10 Jun 2025 10:15:56Reported by NCSCType

SAP fixed vulnerabilities in Hana, Business Objects and NetWeaver: unauthorized access, privilege escalation, and cross site scripting.

Reporter	Title	Published	Views	Family All 144
BDU FSTEC	The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform lies in the lack of a mechanism for verifying the authenticity of incoming RFC requests. This allows attackers to increase their privileges.	11 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Enterprise Event Enablement component of the SAP S/4HANA software platform allows a malicious actor to elevate their privileges and execute arbitrary code.	14 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ReadString function in the SAP MDM Server management server allows a perpetrator to cause a service failure.	15 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SAP Plug-In Basis plugin of the SAP Business Warehouse system, related to deficiencies in the authentication process, allows an intruder to gain unauthorized access to protected information.	15 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the AC system’s risk management plugin, along with compliance requirements and corporate governance in SAP GRC, allows a perpetrator to gain unauthorized access to read and modify data.	15 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web-based software modeling tool, Visual Composer, of the SAP NetWeaver software integration platform allows a hacker to gain access to and modify data.	15 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BI Workspace component of the SAP BusinessObjects Business Intelligence platform allows attackers to execute cross-site scripting attacks.	15 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ABAP Keyword Documentation component of the SAP NetWeaver software integration platform allows attackers to perform cross-site scripting attacks.	24 Jun 202500:00	–	bdu_fstec
Circl	CVE-2025-23192	10 Jun 202501:33	–	circl
Circl	CVE-2025-31325	10 Jun 202503:03	–	circl