CVE-2014-3130: The ABAP Help documentation and translation tools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP Application S...

Security readout for executives and security teams

This CVE describes an authorization weakness in SAP NetWeaver ABAP Application Server Basis help and translation tooling. A local SAP user could abuse crafted help messages to gain privileges and run ABAP instructions. Public data does not provide CVSS, affected version details, or evidence of active exploitation. Exposure is most relevant to SAP NetWeaver ABAP systems where Basis help documentation or translation tools are available to local users. Version scope is not provided in the source bundle, so teams must verify applicability against SAP Note 1910914. Prioritize if legacy SAP ABAP systems remain in production or if many internal users have broad Basis access. The business risk is unauthorized privilege escalation inside critical ERP environments, but urgency is tempered by missing severity data and no cited active exploitation. Mitigation focus: Review SAP Note 1910914 for affected releases and corrective guidance.; Apply SAP vendor fixes or support package guidance where applicable.; Restrict access to ABAP help and translation tooling to required administrators..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.