PT-2025-49772 · Sap · Abap Application Server

Published 2025-12-09 · Updated 2025-12-09 · CVE-2025-42904

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Application Server ABAP (affected versions not specified)

Description An authenticated attacker may be able to read unmasked values displayed in ABAP Lists due to an information disclosure issue. Successful exploitation could lead to unauthorized disclosure of data, impacting confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-549

Related Identifiers

BDU:2025-15895

CVE-2025-42904

Affected Products

Abap Application Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-42904 · Security Note
• https://bdu.fstec.ru/vul/2025-15895 · Security Note
• https://t.me/CVEtracker/39201 · Telegram Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/1998225331657085163 · Twitter Post
• https://me.sap.com/notes/3662324 · Note