PT-2025-1202 · Sap · Sap Gui For Java

Published 2025-01-13 · Updated 2025-07-02 · CVE-2025-0056

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP GUI for Java (affected versions not specified)

Description The issue concerns the storage of user input data on the client PC to enhance usability. An attacker with administrative privileges or access to the victim's user directory at the operating system level could read this data. The disclosed data could range from non-critical to highly sensitive information, depending on the user input provided in transactions, thus causing a significant impact on the application's confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2025-00576

CVE-2025-0056

Affected Products

Sap Gui For Java

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-0056 · Security Note
• https://bdu.fstec.ru/vul/2025-00576 · Security Note
• https://twitter.com/CVEnew/status/1878988110337372176 · Twitter Post
• https://t.me/true_secator/7191 · Telegram Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2025.html · Note
• https://twitter.com/TweetThreatNews/status/1937912841190641907 · Twitter Post
• https://me.sap.com/notes/3502459 · Note
• https://twitter.com/jbhall56/status/1938208863540367520 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note