Vulnerability Details CVE-2025-42918
SAP NetWeaver Application Server for ABAP allows authenticated users with access to background processing to gain unauthorized read access to profile parameters. This results in a low impact on confidentiality, with no impact on integrity or availability
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.4%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2025-42918
-
cpe:2.3:a:sap:sap_basis:700
-
cpe:2.3:a:sap:sap_basis:701
-
cpe:2.3:a:sap:sap_basis:702
-
cpe:2.3:a:sap:sap_basis:731
-
cpe:2.3:a:sap:sap_basis:740
-
cpe:2.3:a:sap:sap_basis:750
-
cpe:2.3:a:sap:sap_basis:751
-
cpe:2.3:a:sap:sap_basis:752
-
cpe:2.3:a:sap:sap_basis:753
-
cpe:2.3:a:sap:sap_basis:754
-
cpe:2.3:a:sap:sap_basis:755
-
cpe:2.3:a:sap:sap_basis:756
-
cpe:2.3:a:sap:sap_basis:757
-
cpe:2.3:a:sap:sap_basis:758
-
cpe:2.3:a:sap:sap_basis:816