Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it has a low impact on the availability but no impact on the confidentiality and integrity.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 14 Oct 2025 00:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Due to the memory corruption vulnerability in SAP NetWeaver AS ABAP and ABAP Platform, an unauthenticated attacker can send a corrupted SAP Logon Ticket or SAP Assertion Ticket to the SAP application server. This leads to a dereference of NULL which makes the work process crash. As a result, it has a low impact on the availability but no impact on the confidentiality and integrity. | |
| Title | Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform | |
| Weaknesses | CWE-476 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: sap
Published:
Updated: 2025-10-14T00:17:32.898Z
Reserved: 2025-04-16T13:25:25.736Z
Link: CVE-2025-42902
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-10-14T01:15:31.960
Modified: 2025-10-14T01:15:31.960
Link: CVE-2025-42902
Redhat
No data.
OpenCVE Enrichment
No data.