Vulnerability in SAP NetWeaver AS Java Application Using Adobe Document Service
CVE-2025-42927
3.4LOW
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 9 September 2025
What is CVE-2025-42927?
The SAP NetWeaver AS Java application that leverages Adobe Document Service is vulnerable due to an outdated OpenSSL library. This weakness allows users with elevated system privileges to access and alter critical system information, posing a security risk. Although the impact on confidentiality and integrity is considered low, it is crucial for organizations to update their OpenSSL version to mitigate potential exploitation. Regular patching and updates are essential to maintain system security and integrity.
Affected Version(s)
SAP NetWeaver AS Java (Adobe Document Service) ADSSAP 7.50