High severity8.2NVD Advisory· Published Dec 9, 2025· Updated Apr 15, 2026

CVE-2025-42878

Description

SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended for production. If enabled, unauthenticated attackers could exploit them to access diagnostics, send crafted requests, or disrupt services. This vulnerability has a high impact on confidentiality, availability and low impact on integrity and of the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/Web Dispatcherllm-create
Goss/Icmllm-fuzzy

Patches

Vulnerability mechanics

References

me.sap.com/notes/3684682nvd
url.sap/sapsecuritypatchdaynvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000