← CVE Intelligence

CVE-2025-42935

Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager) PUBLISHED

Description (CNA)

The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the application, with no impact on integrity or availability.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)affected KRNL64NUC 7.22; affected 7.22EXT; affected KRNL64UC 7.22; affected 7.53; affected KERNEL 7.22; affected 7.54; affected 7.77; affected 7.89; affected 7.93; affected 9.14; affected 9.15; affected 9.16

CWE

CWE-532

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.