CVE-2025-42943

MediumCVSS 4.5/10Last modified Jun 17, 2026

Description

SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths. For a successful attack, the attacker needs developer authorization in a specific Application Server ABAP to make changes in the code, and the victim needs to execute by using SAP GUI for Windows. This could trigger automatic NTLM authentication, potentially exposing hashed credentials to an attacker. As a result, it has a high impact on the confidentiality.

Metrics

CVSS 3.1 4.5/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-250

Affected software

No affected versions have been published.

Timeline

Published: Aug 12, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-4294410.0Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by s CVE-2025-429456.1SAP NetWeaver Application Server ABAP has HTML injection vulnerability. Due to this, an attacker could craft a URL with malicious script as CVE-2025-429466.9Due to directory traversal vulnerability in SAP S/4HANA (Bank Communication Management), an attacker with high privileges and access to a sp CVE-2025-429475.5SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application CVE-2025-429486.1Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious lin CVE-2025-429494.9Due to a missing authorization check in the ABAP Platform, an authenticated user with elevated privileges could bypass authorization restric CVE-2025-42954.6Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B CVE-2025-429509.9SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC CVE-2025-429518.8Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of a database by invok CVE-2025-429527.7SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structur CVE-2025-429538.1SAP Netweaver System Configuration does not perform necessary authorization checks for an authenticated user, resulting in escalation of pri CVE-2025-429542.7SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function