Skip to content
OpenAdvisories
Low · 3.4 CVE-2025-42927 EUVD-2025-27201GHSA-w7h3-8h89-2fq5

Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)

Published Sep 9, 2025 · Updated Sep 9, 2025 · Assigned by sap

Description

SAP NetWeaver AS Java application uses Adobe Document Service, installed with a vulnerable version of OpenSSL.Successful exploitation of known vulnerabilities in the outdated OpenSSL library would allow user with high system privileges to access and modify system information.This vulnerability has a low impact on confidentiality and integrity, with no impact on availability.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver AS Java (Adobe Document Service) ADSSAP 7.50 —

Advisories 2

References