CVE-2025-42888 — Information Disclosure vulnerability in SAP GUI for Windows

CVE-2025-42888

Information Disclosure vulnerability in SAP GUI for Windows PUBLISHED

Description (CNA)

SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP GUI for Windows	affected BC-FES-GUI 8.00; affected 8.10

CWE

CWE-316

References

https://me.sap.com/notes/3651097
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.