CVE-2025-42976: falha de alta gravidade em SAP_SE SAP NetWeaver Application Server ABAP…
Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.1epss 0.4%
SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when submitted to a BIC Document application, could cause a memory corruption error. On successful exploitation, this results in the crash of the target component. Multiple submissions can make the target completely unavailable. A similarly crafted submission can be used to perform an out-of-bounds read operation as well, revealing sensitive information that is loaded in memory at that time. There is no ability to modify any information.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Produtos afetados
SAP_SE · SAP NetWeaver Application Server ABAP (BIC Document)CVEs relacionadas — SAP_SE SAP NetWeaver Application Server ABAP…
No mesmo produto, das mais perigosas para as menos.