CVE-2014-5174: The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW...

Security readout for executives and security teams

CVE-2014-5174 is an SAP NetWeaver Business Warehouse authorization flaw. An authenticated remote user may access sensitive information through insufficiently restricted BW-SYS-DB-DB4 function group functions. Public details do not name affected versions, CVSS, or exact data exposed, so urgency depends on whether SAP BW is deployed and reachable by untrusted users. Exposure is most likely in environments running SAP NetWeaver Business Warehouse where authenticated users can reach RFC or function-module interfaces tied to BW-SYS-DB-DB4. The provided data does not identify specific versions, configurations, or internet exposure conditions. Prioritize assessment if SAP BW stores regulated, financial, customer, or operational data and is accessible by broad internal user populations. The absence of KEV evidence lowers emergency pressure, but SAP BW data sensitivity can make remediation important. Mitigation focus: Review SAP Note 1974016 for applicability and vendor remediation guidance.; Restrict SAP BW access to trusted users and trusted network paths.; Review authorization roles for access to BW-SYS-DB-DB4 function modules..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.