CVEvulnerability
CVE-2025-42927
3.4 LOW
Official page ↗
- Status
- Deferred
- Published
- 2025-09-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.4 LOW — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Description
SAP NetWeaver AS Java application uses Adobe Document Service, installed with a vulnerable version of OpenSSL.Successful exploitation of known vulnerabilities in the outdated OpenSSL library would allow user with high system privileges to access and modify system information.This vulnerability has a low impact on confidentiality and integrity, with no impact on availability.
References
- https://me.sap.com/notes/3525295 me.sap.com
- https://url.sap/sapsecuritypatchday url.sap