CVE-2025-42935CWE-532

Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)

Medium · published August 12, 2025

CVSS v3.1
4.1
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the application, with no impact on integrity or availability.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00134 · 2.6th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-08-12T02:05Z
EPSS history
Timeline
  • 12 AUG 02:05Z
    Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager)
    cvelistv5