Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-42888 EUVD-2025-60990GHSA-59p6-qq9j-xgjc

Information Disclosure vulnerability in SAP GUI for Windows

Published Nov 11, 2025 · Updated Nov 12, 2025 · Assigned by sap

Description

SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.

Affected products

VendorProductAffectedFixed
SAP_SE SAP GUI for Windows BC-FES-GUI 8.00, 8.10 —

Advisories 2

References