Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_netweaver_and_abap_platform_(sdccn):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Netweaver And Abap Platform (Sdccn) (a68529e7-48bf-5a89-9646-e9a7b8afee30)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-42974 vulnerable 2026-06-08 07:25:08.495242 Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)
MEDIUM (4.3)
Due to missing authorization check, an attacker authenticated as a non-administrative user could call a remote-enabled function module. This could enable access to information normally restricted, resulting in low impact on confidentiality. There is no impact on integrity or availability.
Published: 2025-07-08T00:37:33.134Z
Updated: 2025-07-08T18:14:06.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23189 vulnerable 2026-06-08 07:10:55.303556 Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)
MEDIUM (4.3)
Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an authenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability
Published: 2025-02-11T00:33:18.120Z
Updated: 2025-02-11T15:18:55.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23187 vulnerable 2026-06-08 07:10:55.302226 Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN)
MEDIUM (5.3)
Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an unauthenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability.
Published: 2025-02-11T00:33:10.032Z
Updated: 2025-02-18T18:07:28.098Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.