CVE-2025-42935

MEDIUM EPSS 2.6%

Published Aug 12, 202510mo ago · Modified Jun 17, 20262w ago

4.1 CVSS 3.1

Medium

Published Aug 12, 2025 10mo ago

Last Modified Jun 17, 2026 2w ago

Description

The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the application, with no impact on integrity or availability.

CVSS Details

Base Score

4.1

Exploitability

0.5

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector Local

Attack Complexity High

Privileges Required High

User Interaction None

Scope Unchanged

Confidentiality High

Integrity None

Availability None

Threat Intelligence

EPSS Exploit Probability

2.6% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-532

References 2

me.sap.com https://me.sap.com/notes/3601480
url.sap https://url.sap/sapsecuritypatchday

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.