CVE-2025-42888

MEDIUM EPSS 0.7%

Published Nov 11, 20257mo ago · Modified Jun 17, 20262w ago

5.5 CVSS 3.1

Medium

Published Nov 11, 2025 7mo ago

Last Modified Jun 17, 2026 2w ago

Description

SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.

CVSS Details

Base Score

5.5

Exploitability

1.1

Impact

4.0

Vector string

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N

Attack Vector Local

Attack Complexity Low

Privileges Required High

User Interaction Required

Scope Changed

Confidentiality High

Integrity None

Availability None

Threat Intelligence

EPSS Exploit Probability

0.7% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-316

References 2

me.sap.com https://me.sap.com/notes/3651097
url.sap https://url.sap/sapsecuritypatchday

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.