← Database

CVE-2025-27437

MEDIUM CVSS: 4.3 Published: 2025-04-08 Modified: 2026-06-17

Description

A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server ABAP. Because of this, an attacker authenticated as a non-administrative user can initiate a transaction, allowing them to access but not modify non-sensitive data without further authorization and with no effect on availability.

Affected Platforms

Unknown

Weakness Type

CWE-862

References