CVE-2025-42877
Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: SAP SE

Description
SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server allow an unauthenticated user to exploit logical errors that lead to a memory corruption vulnerability. This results in high impact on the availability with no impact on confidentiality or integrity of the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-12-09
Last Modified
2025-12-09
Generated
2026-07-06
AI Q&A
2025-12-09
EPSS Evaluated
2026-07-05
NVD
CVE-2025-42877
EUVD
EUVD-2025-201850

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
sap internet_communication_manager 3.1
sap content_server 3.1
sap web_dispatcher 3.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in SAP Web Dispatcher, Internet Communication Manager (ICM), and SAP Content Server, where an unauthenticated user can exploit logical errors leading to memory corruption. This memory corruption can cause significant disruption to the availability of the affected applications.

Impact Analysis

The vulnerability can severely impact the availability of the affected SAP components, potentially causing service outages or denial of service. However, it does not affect the confidentiality or integrity of the application or its data.

Compliance Impact

This vulnerability impacts the availability of the application but does not affect confidentiality or integrity. Since standards like GDPR and HIPAA emphasize the protection of personal data confidentiality and integrity, this vulnerability does not directly compromise those aspects. However, the availability impact could affect service continuity, which may have indirect compliance implications depending on the specific regulatory requirements for uptime and service availability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-42877. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart