CVE-2025-42997

medium

Description

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on confidentiality, integrity, and availability.

References

https://url.sap/sapsecuritypatchday

https://me.sap.com/notes/3577300

Details

Source: Mitre, NVD

Published: 2025-05-13

Updated: 2025-05-13

Risk Information

CVSS v2

Base Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:M/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 6.6

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Severity: Medium

EPSS

EPSS: 0.00031