This vulnerability (CWE-347) affects SAP NetWeaver Application Server ABAP and ABAP Platform. An attacker with normal authenticated privileges can obtain a valid signed message and then send altered signed XML documents that the system incorrectly accepts as valid. This improper verification of cryptographic signatures may allow unauthorized access to sensitive data and disrupt normal system usage. The CVSS v3.1 base score is 8.8, indicating high severity, with network attack vector, low attack complexity, privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory information is provided in the data, and the affected versions include multiple SAP_BASIS versions from 700 through 918.

Successful exploitation can result in acceptance of tampered identity information, leading to unauthorized access to sensitive user data and potential disruption of normal system operations. The vulnerability impacts confidentiality, integrity, and availability of the affected SAP systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to SAP NetWeaver AS ABAP and ABAP Platform to trusted users only and monitor for suspicious activity involving signed XML documents. Follow SAP's official communications for updates on patches or mitigations.