CVE-2025-31329 Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
Administrative attackers can inject malicious instructions into user settings to expose sensitive credentials, enabling unauthorized access to local or adjacent systems.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-31329?
CVE-2025-31329 is a medium-severity vulnerability in SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform, published on 13 May 2025. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
SAP NetWeaver is vulnerable to an Information Disclosure vulnerability caused by the injection of malicious instructions into user configuration settings. An attacker with administrative privileges can craft these instructions so that when accessed by the victim, sensitive information such as user credentials is exposed. These credentials may then be used to gain unauthorized access to local or adjacent systems. This results in high impact to Confidentiality, with no significant effect on Integrity or Availability.
Weakness: CWE-141
Which versions are affected by CVE-2025-31329?
How do I fix CVE-2025-31329?
No fix has been published for CVE-2025-31329 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-31329 being exploited?
There is no known exploitation of CVE-2025-31329 in the wild and no public exploit code.
Sources
Also known as GHSA-5x6q-c4xg-h54m.