What is CVE-2025-0071?

CVE-2025-0071 is a medium-severity vulnerability in SAP Se Web Dispatcher And Internet Communication Manager, classified under Insertion of Sensitive Information into Log File. CVSS score: 4.9/10. Published 2025-03-11.

How severe is CVE-2025-0071?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Information disclosure in SAP Se Web Dispatcher And Internet Communication Manager

CVE-2025-0071

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impact on integrity or availability.

EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Sap_se Sap Web Dispatcher And Internet Communication Manager — versions KRNL64UC 7.53, WEBDISP 7.53, 7.54

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

Frequently asked questions

What is CVE-2025-0071?: CVE-2025-0071 is a medium-severity vulnerability in SAP Se Web Dispatcher And Internet Communication Manager, classified under Insertion of Sensitive Information into Log File. CVSS score: 4.9/10. Published 2025-03-11.
How severe is CVE-2025-0071?: Medium severity. CVSS v3 base score is 4.9 out of 10.