CVE-2025-42997 – Information Disclosure vulnerability in SAP Gateway Client

https://notcve.org/view.php?id=CVE-2025-42997

13 May 2025 — Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on confidentiality, integrity, and availability. • https://me.sap.com/notes/3577300 • CWE-732: Incorrect Permission Assignment for Critical Resource •