CVE-2025-42877 — Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server

CVE-2025-42877

Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server PUBLISHED

Description (CNA)

SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory corruption vulnerability. This results in high impact on the availability with no impact on confidentiality or integrity of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Web Dispatcher, Internet Communication Manager and SAP Content Server	affected KRNL64UC 7.53; affected WEBDISP 7.53; affected 7.54; affected XS_ADVANCED_RUNTIME 1.00; affected SAP_EXTENDED_APP_SERVICES 1; affected CONTSERV 7.53; affected KERNEL 7.53

CWE

CWE-787

References

https://me.sap.com/notes/3677544
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.