Vulnerabilitycritical
SAP GUI Input History Found Vulnerable to Weak Encryption
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-0055 | SAP GUI for Windows stores user input on the client PC to improve usability | 6.0 | <1% | ||
| CVE-2025-0056 | SAP GUI for Java saves user input on the client PC to improve usability | 6.0 | <1% | ||
| CVE-2025-0059 | Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP store user input in the local browser storage to improve usability | 6.0 | <1% |
From the original article
2 min read at infosecurity-magazine.com
Two vulnerabilities in SAP’s Graphical User Interface (SAP GUI) input history feature have been disclosed, revealing weaknesses in how sensitive user data is stored locally. The issues, discovered by Pathlock, affect both the Windows and Java versions of SAP GUI and are tracked as CVE-2025-0055 and CVE-2025-0056, respectively.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.