An authenticated user can execute a report generation command that overwrites another user's data, allowing an attacker to gain higher privileges. This flaw provides a clear path to heightening authority within the system and modifies integrity without affecting confidentiality or availability.

The vulnerability resides in SAP NetWeaver and the ABAP Platform. All installations of the Application Server ABAP component are potentially impacted. No specific version ranges are listed, so any current or unpatched configuration of these products should be reviewed.

The CVSS score of 7.1 indicates a medium‑high severity. Since the EPSS score is not available, the probability of exploitation is unknown. The vulnerability is not listed in the CISA KEV catalog, suggesting no publicly known exploits at the time of this analysis. The likely attack vector is an authenticated session where the user can run ABAP reports; no external trigger is required beyond legitimate credentials.