Vulnerability in SAP NetWeaver AS Java Application Using Adobe Document Service
CVE-2025-42927

3.4LOW

Key Information:

Vendor

SAP

Vendor
CVE Published:
9 September 2025

What is CVE-2025-42927?

The SAP NetWeaver AS Java application that leverages Adobe Document Service is vulnerable due to an outdated OpenSSL library. This weakness allows users with elevated system privileges to access and alter critical system information, posing a security risk. Although the impact on confidentiality and integrity is considered low, it is crucial for organizations to update their OpenSSL version to mitigate potential exploitation. Regular patching and updates are essential to maintain system security and integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

SAP NetWeaver AS Java (Adobe Document Service) ADSSAP 7.50

References

CVSS V3.1

Score:
3.4
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.