What’s Vulnerable › Vulnerabilities

CVE-2025-42995: Multiple vulnerabilities in SAP MDM Server

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-10 · updated 2026-06-17
• Weakness: CWE-590

Description

SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application.

Affected products

• SAP_SE SAP MDM Server: MDM_SERVER 710.750

References

• https://me.sap.com/notes/3610006
• https://url.sap/sapsecuritypatchday

Get alerted when CVE-2025-42995 or the next vulnerability affects your stack