TLS Connection Vulnerability in SAP NetWeaver Application Server Java

CVE-2025-42978

What is CVE-2025-42978?

The SAP NetWeaver Application Server Java component responsible for outbound TLS connections has a security flaw that fails to adequately verify the hostname against the wildcard hostname specified in the remote TLS server's certificate. This oversight can result in establishing a connection to a potentially malicious server, leading to the risk of information disclosure. While the integrity and availability of the service remain unaffected, addressing this vulnerability is crucial to maintain secure communication and protect sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References