CVE-2025-42902: Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform
Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it has a low impact on the availability but no impact on the confidentiality and integrity.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-42902?
CVE-2025-42902 is classified as a high severity vulnerability due to the potential for system crashes.
How do I fix CVE-2025-42902?
To fix CVE-2025-42902, it is recommended to apply the latest security patches provided by SAP.
Who is affected by CVE-2025-42902?
CVE-2025-42902 affects users of SAP NetWeaver AS ABAP and SAP ABAP Platform.
What types of attacks can exploit CVE-2025-42902?
CVE-2025-42902 can be exploited by unauthenticated attackers sending corrupted SAP Logon or Assertion Tickets.
What impact does CVE-2025-42902 have on SAP applications?
CVE-2025-42902 can lead to a crash of the SAP application server's work process due to memory corruption.