CVE-2025-42904: Information Disclosure vulnerability in Application Server ABAP
Due to an Information Disclosure vulnerability in Application Server ABAP, an authenticated attacker could read unmasked values displayed in ABAP Lists. Successful exploitation could lead to unauthorized disclosure of data, resulting in a high impact on confidentiality without affecting integrity or availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-42904?
CVE-2025-42904 has a high severity rating due to its potential impact on data confidentiality.
How do I fix CVE-2025-42904?
To fix CVE-2025-42904, apply the latest security patches provided by SAP for the Application Server ABAP.
Who can exploit CVE-2025-42904?
An authenticated attacker can exploit CVE-2025-42904 to read unmasked values in ABAP Lists.
What data is affected by CVE-2025-42904?
CVE-2025-42904 affects the confidentiality of data displayed in ABAP Lists within the SAP Application Server ABAP.
Is CVE-2025-42904 specific to any version of SAP?
CVE-2025-42904 is related to the SAP Application Server ABAP, with no specific version mentioned, making it important to check for updates.