PT-2025-49767 · Sap · Sap Web Dispatcher+2

Published 2025-12-09 · Updated 2025-12-09 · CVE-2025-42877

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SAP Web Dispatcher SAP Internet Communication Manager (ICM) SAP Content Server (affected versions not specified)

Description An unauthenticated user can exploit logical errors in SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server, leading to a memory corruption issue. This impacts the availability of the application, with no effect on its confidentiality or integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-16274

CVE-2025-42877

Affected Products

Sap Content Server

Internet Communication Manager

Sap Web Dispatcher

References · 7

• https://bdu.fstec.ru/vul/2025-16274 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-42877 · Security Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/december-2025.html · Note
• https://url.sap/sapsecuritypatchday · Note
• https://me.sap.com/notes/3677544 · Note
• https://twitter.com/CVEnew/status/1998225337201897836 · Twitter Post
• https://t.me/CVEtracker/39196 · Telegram Post