Beveiligingsadvies

CVE-2025-42902

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-14 00:17:32

Laatst bijgewerkt 2025-10-14 15:22:05

Toegewezen door sap

CVSS-score 5.3

Status PUBLISHED

Beschrijving

Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it has a low impact on the availability but no impact on the confidentiality and integrity.

← Alle CVE's bekijken Bekijk op cve.org ↗