CVE-2025-42994 — Multiple vulnerabilities in SAP MDM Server

CVE-2025-42994

Multiple vulnerabilities in SAP MDM Server PUBLISHED

Description (CNA)

SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP MDM Server	affected MDM_SERVER 710.750

CWE

CWE-590

References

https://me.sap.com/notes/3610006
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.