Skip to content
CVE PROGRAM SOURCE RECORD3.0 Low

CVE-2025-42909

Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances

Description

SAP Cloud Appliance Library Appliances allows an attacker with high privileges to leverage an insecure S/4HANA default profile setting in an existing SAP CAL appliances to gain access to other appliances. This has low impact on confidentiality of the application, integrity and availability is not impacted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Cloud Appliance Library Appliances

Default version status: unaffected

  • TITANIUM_WEBAPP 4.0affected

References