PT-2025-41841 · Sap · Sap Cloud Appliance Library

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-42909

Positive Technologies (AI Summary)

CVSS v3.1

3.0

Low

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Cloud Appliance Library Appliances (affected versions not specified)

Description An attacker with high privileges can exploit an insecure default profile setting within existing SAP CAL appliances to gain access to other appliances. The issue has a low impact on the confidentiality of the application, and does not impact integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1004

Related Identifiers

CVE-2025-42909

Affected Products

Sap Cloud Appliance Library

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-42909 · Security Note
• https://t.me/cveNotify/138484 · Telegram Post
• https://me.sap.com/notes/3643871 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/1977903151681278240 · Twitter Post
• https://t.me/CVEtracker/34822 · Telegram Post