CVE-2025-42877CWE-787

CVE-2025-42877

High · published December 9, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

🚨 An unauthenticated user can exploit this vulnerability to wreak havoc in SAP systems! Just one logical error can lead to memory corruption, affecting availability without touching sensitive data. 🔥 Think of it like a busy restaurant where an unruly guest sneaks into the kitchen and messes with the orders. The kitchen might become chaotic, but the guests don’t lose their meals—just the kitchen’s efficiency is compromised. This memory corruption vulnerability means that an attacker could disrupt the availability of your SAP applications, leading to potential downtime when you need them most. While your data remains safe and sound, the impact on operations could be a real headache!

Put simply

Think of it like a busy restaurant where an unruly guest sneaks into the kitchen and messes with the orders. The kitchen might become chaotic, but the guests don’t lose their meals—just the kitchen’s efficiency is compromised. The vulnerability in SAP Web Dispatcher, ICM, and Content Server allows an unauthenticated attacker to exploit logical errors, causing memory corruption that disrupts the application's availability.

What to do

This memory corruption vulnerability means that an attacker could disrupt the availability of your SAP applications, leading to potential downtime when you need them most. While your data remains safe and sound, the impact on operations could be a real headache! To mitigate this risk, promptly update to the latest version of the affected SAP components. Additionally, implement strict access controls to limit who can interact with your systems. Regularly monitor your logs for any unauthorized access attempts. You've got this! With these steps, you can safeguard your SAP environment and keep things running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00541 · 44.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-09T21:17Z
References (2)
EPSS history
Timeline
  • 09 DEC 02:14Z
    Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
    cvelistv5