What is CVE-2025-27428?

CVE-2025-27428 is a high-severity vulnerability in Sap_se Sap Netweaver And Abap Platform (Service Data Collection), classified under Missing Authorization. CVSS score: 7.7/10. Published 2025-04-08.

How severe is CVE-2025-27428?

High severity. CVSS v3 base score is 7.7 out of 10.

Auth bypass in Sap_se Sap Netweaver And Abap Platform (Service Data Collection)

CVE-2025-27428

Due to directory traversal vulnerability, an authorized attacker could gain access to some critical information by using RFC enabled function module. Upon successful exploitation, they could read files from any managed system connected to…

Vulnerability class: Broken Access Control

EPSS: 0.006 (44.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.

Affected products

Sap_se Sap Netweaver And Abap Platform (Service Data Collection) — versions ST-PI 2008_1_700, 2008_1_710, 740

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

Frequently asked questions

What is CVE-2025-27428?: CVE-2025-27428 is a high-severity vulnerability in Sap_se Sap Netweaver And Abap Platform (Service Data Collection), classified under Missing Authorization. CVSS score: 7.7/10. Published 2025-04-08.
How severe is CVE-2025-27428?: High severity. CVSS v3 base score is 7.7 out of 10.