3537476 - [CVE-2025-0070] Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform

[SAPSupport]

We already read SAP Note (3537476 - [CVE-2025-0070] Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform). We will upgrade SAP Kernel from D/Q/P environement.

For make sure business work fine after upgrade new SAP Kernel we need test plan. We not see any suggestion for test plan in SAP Note 3537476. Could your provide guide for test plan? We only focus SAP standard function, for example T-code :SD01 create sales order ,etc...  

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

Hello,

There is no test plan for SAP Note 3537476 or, in general, for a SAP Kernel upgrade. As this is a more generic activity, the best approach is performing the upgrade in a lower environment (development or quality), perform validations from your end and then apply the upgrade in production. Also check the paper Update Strategy for the Kernel of the Application Server ABAP in On Premise Landscapes for detailed SAP recommendations.

Regarding SAP Note 3537476, please also check SAP Note 3549556 - FAQ for Security Note 3537476 / Error Create failed during internal communication.

Best regards.