CVE-2025-42995

—

CVSS 3.1

7.5 high

EPSS

<1%p32

Published

Jun 10, 2025 (Jun 10, 2025)

Modified

Jun 17, 2026

Description

SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application.

Weakness: CWE-590
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.