CVE-2025-0058
Information Disclosure vulnerability in SAP Business Workflow and SAP Flexible Workflow
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
14 ene 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In SAP Business Workflow and SAP Flexible Workflow, an authenticated attacker can manipulate a parameter in an otherwise legitimate resource request to view sensitive information that should otherwise be restricted. The attacker does not have the ability to modify the information or to make the information unavailable.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
SAP_SE · SAP Business Workflow and SAP Flexible Workflow¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →