CVE-2025-42935
Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 4.1EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 ago 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the application, with no impact on integrity or availability.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
SAP_SE · SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →