Vulnerability in SAP Se Mdm Server
CVE-2025-42994
SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application.
EPSS: 0.004 (33.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Sap_se Sap Mdm Server — versions MDM_SERVER 710.750
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-42994?
- CVE-2025-42994 is a high-severity vulnerability in SAP Se Mdm Server, classified under CWE-590. CVSS score: 7.5/10. Published 2025-06-10.
- How severe is CVE-2025-42994?
- High severity. CVSS v3 base score is 7.5 out of 10.