CVE-2025-23186 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destin…
High CVSS: 8.5

CVE-2025-23186

In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be further exploited to completely compromise the remote service, potentially resulting in a significant impact on the confidentiality, integrity, and availability of the application.
Vendor
-
Product
-
CWE
CWE-94
Yayın Tarihi
2025-04-08 08:15:15
Güncelleme
2025-04-08 18:13:53
Source Identifier
cna@sap.com
KEV Date Added
-

Kategoriler

Referanslar