CVE-2025-42927 — Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)

CVE-2025-42927

Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service) PUBLISHED

Description (CNA)

SAP NetWeaver AS Java application uses Adobe Document Service, installed with a vulnerable version of OpenSSL.Successful exploitation of known vulnerabilities in the outdated OpenSSL library would allow user with high system privileges to access and modify system information.This vulnerability has a low impact on confidentiality and integrity, with no impact on availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver AS Java (Adobe Document Service)	affected ADSSAP 7.50

CWE

CWE-1395

References

https://me.sap.com/notes/3525295
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.