CVE-2025-42994highCWE-590

CVE-2025-42994: high-severity vulnerability in SAP_SE SAP MDM Server

Multiple vulnerabilities in SAP MDM Server

Published · Updated

Follow this CVE+ Monitor SAP MDM Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.5%
SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
SAP_SE · SAP MDM Server
Related CVEs — SAP_SE SAP MDM Server

In the same product, most dangerous first.

CVE-2025-42995HIGHMultiple vulnerabilities in SAP MDM ServerEPSS 0.4%CVE-2025-42996MEDIUMMultiple vulnerabilities in SAP MDM ServerEPSS 0.2%