CVE-2025-42888mediumCWE-316

CVE-2025-42888: falha de média gravidade em SAP_SE SAP GUI for Windows

Information Disclosure vulnerability in SAP GUI for Windows

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP GUI

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.5epss 0.1%
SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
Produtos afetados
SAP_SE · SAP GUI for Windows
CVEs relacionadas — SAP_SE SAP GUI for Windows

No mesmo produto, das mais perigosas para as menos.

CVE-2023-32113HIGHInformation Disclosure vulnerability in SAP GUI for WindowsEPSS 0.5%CVE-2025-42943MEDIUMInformation Disclosure in SAP GUI for WindowsEPSS 0.3%CVE-2025-0055MEDIUMInformation Disclosure vulnerability in SAP GUI for WindowsEPSS 0.2%CVE-2025-43005MEDIUMInformation Disclosure vulnerability in SAP GUI for WindowsEPSS 0.2%CVE-2025-24870MEDIUMInsecure Key & Secret Management vulnerability in SAP GUI for WindowsEPSS 0.2%CVE-2024-39600MEDIUM[CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for WindowsEPSS 0.1%