Boletines de Vulnerabilidades

CVE-2025-25243

   
Software afectado SAP
 
SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any user interaction. This can reveal highly sensitive information with no impact to integrity or availability.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-25243