CVE-2025-42909 — Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances

CVE-2025-42909

Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances PUBLISHED

Description (CNA)

SAP Cloud Appliance Library Appliances allows an attacker with high privileges to leverage an insecure S/4HANA default profile setting in an existing SAP CAL appliances to gain access to other appliances. This has low impact on confidentiality of the application, integrity and availability is not impacted.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Cloud Appliance Library Appliances	affected TITANIUM_WEBAPP 4.0

CWE

CWE-1004

References

https://me.sap.com/notes/3643871
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.