CVE-2025-27428— Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection)
Quick assessment
Affected
SAP_SE SAP NetWeaver and ABAP Platform (Service Data Collection)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SAP Solution Manager是德国思爱普（SAP）公司的一套集系统监控、SAP支持桌面、自助服务、ASAP实施等多个功能为一体的系统管理平台。该平台可以帮助客户建立SAP解决方案的生命周期管理，并提供系统监控、远程支持服务和SAP产品组件升级等功能。 SAP Solution Manager存在安全漏洞，该漏洞源于目录遍历，可能导致敏感信息泄露。
Possible ATT&CK Techniques 1 AI
T1005 · Data from Local System
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-27428
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection)
Source: CVE Program / CVE List V5
Vulnerability Description
Due to directory traversal vulnerability, an authorized attacker could gain access to some critical information by using RFC enabled function module. Upon successful exploitation, they could read files from any managed system connected to SAP Solution Manager, leading to high impact on confidentiality. There is no impact on integrity or availability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
SAP Solution Manager 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP Solution Manager是德国思爱普（SAP）公司的一套集系统监控、SAP支持桌面、自助服务、ASAP实施等多个功能为一体的系统管理平台。该平台可以帮助客户建立SAP解决方案的生命周期管理，并提供系统监控、远程支持服务和SAP产品组件升级等功能。 SAP Solution Manager存在安全漏洞，该漏洞源于目录遍历，可能导致敏感信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SAP_SE | SAP NetWeaver and ABAP Platform (Service Data Collection) | ST-PI 2008_1_700 | - |
|
II. Public POCs for CVE-2025-27428
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-27428
请登录查看更多情报信息。
Same Patch Batch · SAP_SE · 2025-04-08 · 17 CVEs total
| CVE-2025-31330 | 9.9 CRITICAL | Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) |
| CVE-2025-27429 | 9.9 CRITICAL | Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise) |
| CVE-2025-30016 | 9.8 CRITICAL | Authentication Bypass Vulnerability in SAP Financial Consolidation |
| CVE-2025-23186 | 8.5 HIGH | Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetW |
| CVE-2025-30014 | 7.7 HIGH | Directory Traversal vulnerability in SAP Capital Yield Tax Management |
| CVE-2025-26654 | 6.8 MEDIUM | Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud) |
| CVE-2025-30013 | 6.7 MEDIUM | Code Injection vulnerability in SAP ERP BW Business Content |
| CVE-2025-31332 | 6.6 MEDIUM | Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platf |
| CVE-2025-26657 | 5.3 MEDIUM | Information Disclosure vulnerability in SAP KMC WPC |
| CVE-2025-26653 | 4.7 MEDIUM | Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applica |
| CVE-2025-30017 | 4.4 MEDIUM | Missing Authorization check in SAP Solution Manager |
| CVE-2025-31333 | 4.3 MEDIUM | Odata meta-data tampering in SAP S4CORE entity |
| CVE-2025-31331 | 4.3 MEDIUM | Authorization Bypass vulnerability in SAP NetWeaver |
| CVE-2025-27437 | 4.3 MEDIUM | Missing Authorization check in SAP NetWeaver Application Server ABAP (Virus Scan Interface |
| CVE-2025-27435 | 4.2 MEDIUM | Information Disclosure Vulnerability in SAP Commerce Cloud |
| CVE-2025-30015 | 4.1 MEDIUM | Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABA |
IV. Related Vulnerabilities
Same vendor: SAP_SE
-
CVE-2026-58231
Improper Authorization in SAP Commerce Cloud (Data Hub Adapt -
CVE-2026-66779
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Ap -
CVE-2026-66778
Multiple vulnerabilities in SAP Business AI Platform (Approu -
CVE-2026-66777
Multiple vulnerabilities in SAP Business AI Platform (Approu -
CVE-2026-66776
Multiple vulnerabilities in SAP Business AI Platform (Approu
Same weakness: CWE-862
-
CVE-2026-39914
TIM Flow < 26.0.6 Unauthorized SQL Query Execution via Dashb -
CVE-2026-78387
RansomLook Missing Authorization in Web Configuration Editor -
CVE-2026-78380
Private Group and Market Posts Disclosed Through Public Noti -
CVE-2026-76847
act 0.2.81 through 0.2.89 Missing Authorization in the Artif -
CVE-2026-78372
RansomLook Missing Authorization Allows Disclosure of Privat
V. Comments for CVE-2025-27428
No comments yet