CVE-2025-42935

MEDIUM

4.1

Beschreibung

The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the application, with no impact on integrity or availability.

CVE Details

CVSS v3.1 Bewertung4.1

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

AngriffsvektorLOCAL

KomplexitatHIGH

Erforderliche PrivilegienHIGH

BenutzerinteraktionNONE

Veroffentlicht8/12/2025

Zuletzt geandert8/12/2025

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-532

Referenzen

https://me.sap.com/notes/3601480(cna@sap.com)

https://url.sap/sapsecuritypatchday(cna@sap.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.