{"id":"CVE-2025-42935","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-42935","generatedAt":"2026-10-27T23:58:53.282Z","title":"The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure.","description":"The SAP NetWeaver Application Server ABAP and ABAP Platform Internet Communication Manager (ICM) permits authorized users with admin privileges and local access to log files to read sensitive information, resulting in information disclosure. This leads to high impact on the confidentiality of the application, with no impact on integrity or availability.","published":"2025-08-12T03:15:26.000Z","lastModified":"2026-06-17T09:23:16.000Z","status":"Deferred","sourceIdentifier":"cna@sap.com","cvss":{"version":"3.1","score":4.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-532"],"affected":[],"epss":{"score":0.00134,"percentile":0.02864,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.13%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://me.sap.com/notes/3601480","source":"cna@sap.com"},{"url":"https://url.sap/sapsecuritypatchday","source":"cna@sap.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-42935","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}