Skip to content
CVE PROGRAM SOURCE RECORD4.1 Medium

CVE-2025-42935

Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the application, with no impact on integrity or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)

Default version status: unaffected

  • KRNL64NUC 7.22affected
  • 7.22EXTaffected
  • KRNL64UC 7.22affected
  • 7.53affected
  • KERNEL 7.22affected
  • 7.54affected
  • 7.77affected
  • 7.89affected
  • 7.93affected
  • 9.14affected
  • 9.15affected
  • 9.16affected

References