CVE-2025-42996CWE-590

Multiple vulnerabilities in SAP MDM Server

Medium · published June 10, 2025

CVSS v3.1
5.6
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modify non-sensitive information or consume sufficient resources which could degrade the performance of the server causing low impact on confidentiality, integrity and availibility of the application.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Weakness
CWE-590 · Free of Memory not on the Heap
Published
2025-06-10T00:13Z
EPSS history
Timeline
  • 10 JUN 00:13Z
    Multiple vulnerabilities in SAP MDM Server
    cvelistv5