PT-2025-24597 · Sap · Sap Master Data Management Server

Published 2025-06-10 · Updated 2025-06-10 · CVE-2025-42996

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions SAP Master Data Management Server (affected versions not specified)

Description The issue allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate. This gives the ability to access or modify non-sensitive information or consume sufficient resources, which could degrade the performance of the server, causing low impact on confidentiality, integrity, and availability of the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-590

Related Identifiers

BDU:2025-16271

CVE-2025-42996

Affected Products

Sap Master Data Management Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-42996 · Security Note
• https://bdu.fstec.ru/vul/2025-16271 · Security Note
• https://me.sap.com/notes/3610006 · Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/june-2025.html · Note
• https://t.me/cvetracker/25854 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1932351622593581111 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note