Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-42888

Information Disclosure vulnerability in SAP GUI for Windows

Description

SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP GUI for Windows

Default version status: unaffected

  • BC-FES-GUI 8.00affected
  • 8.10affected

References