CVE-2025-0066HIGH 8.8EPSS p45.7%

CVE-2025-0066CVE-2025-0066

Description

Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework) allows an attacker to access restricted information due to weak access controls. This can have a significant impact on the confidentiality, integrity, and availability of an application

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.58% probability of exploitation · percentile 45.7% · 2026-10-05T12:00:23Z
Published2025-01-14
Last modified2025-10-23

Underlying weaknesses· 1

CWE-732

References

  1. https://me.sap.com/notes/3550708
  2. https://url.sap/sapsecuritypatchday

1

TypeTargetConfidenceTier
WeaknessIncorrect Permission Assignment for Critical Resourcecwe-7320%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-0070
CVE
CVE-2025-0063
CVE
CVE-2025-23186
CVE
CVE-2026-0509
CVE
CVE-2026-0507
CVE
CVE-2026-24310
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.