60
Vulnerability1 · 1 read
CVE-2025-0055
- CVSS 3.1
- 6.0 medium
- EPSS
- <1%p16
- Published
- ·
- Modified
Description · NVD
SAP GUI for Windows stores user input on the client PC to improve usability. Under very specific circumstances an attacker with administrative privileges or access to the victim�s user directory on the Operating System level would be able to read this data. Depending on the user input provided in transactions, the disclosed data could range from non-critical data to highly sensitive data, causing high impact on confidentiality of the application.
- Weakness
- CWE-497
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N