Vulnerability in SAP NetWeaver AS Java Application Using Adobe Document Service
CVE-2025-42927

3.4LOW

Key Information:

Vendor

SAP

Vendor
CVE Published:
9 September 2025

What is CVE-2025-42927?

The SAP NetWeaver AS Java application that leverages Adobe Document Service is vulnerable due to an outdated OpenSSL library. This weakness allows users with elevated system privileges to access and alter critical system information, posing a security risk. Although the impact on confidentiality and integrity is considered low, it is crucial for organizations to update their OpenSSL version to mitigate potential exploitation. Regular patching and updates are essential to maintain system security and integrity.

Affected Version(s)

SAP NetWeaver AS Java (Adobe Document Service) ADSSAP 7.50

References

CVSS V3.1

Score:
3.4
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-42927 : Vulnerability in SAP NetWeaver AS Java Application Using Adobe Document Service