A missing authorization check in SAP NetWeaver and ABAP Platform’s Change and Transport System – Customer Transport Integration Wizard allows a low‑privileged user to modify configuration tables that control access to data objects during specific operations. These unauthorized changes can produce processing delays and operational disruption, representing a limited impact on the system’s integrity and availability while leaving confidentiality unaffected.

The vulnerability affects SAP NetWeaver and ABAP Platform, specifically the Change and Transport System – Customer Transport Integration Wizard component. No specific version information is provided in the advisory.

The CVSS score of 4.2 indicates low severity. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector would involve an internal user with limited privileges who can access the configuration tables, and no external exploitation path is described. While the risk is modest, no public exploitation has been reported.