CVE-2025-42994CWE-590

Multiple vulnerabilities in SAP MDM Server

High · published June 10, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.5th percentile
Weakness
CWE-590 · Free of Memory not on the Heap
Published
2025-06-10T00:13Z
EPSS history
Timeline
  • 10 JUN 00:13Z
    Multiple vulnerabilities in SAP MDM Server
    cvelistv5