SAP MDM Server Session Control Vulnerability

CVE-2025-42996

What is CVE-2025-42996?

The SAP MDM Server has a vulnerability that allows attackers to take control over existing client sessions, enabling them to execute specific functions without re-authenticating. This flaw potentially permits unauthorized access to non-sensitive information, which might lead to resource consumption that can degrade the server's performance. Organizations using affected versions must be vigilant to prevent any unauthorized activities that could impact system availability.

References