- Description
- SAP GUI for Java saves user input on the client PC to improve usability. An attacker with administrative privileges or access to the victim�s user directory on the Operating System level would be able to read this data. Depending on the user input provided in transactions, the disclosed data could range from non-critical data to highly sensitive data, causing high impact on confidentiality of the application.
- Source
- cna@sap.com
- NVD status
- Received
CVSS 3.1
- Type
- Secondary
- Base score
- 6
- Impact score
- 4
- Exploitability score
- 1.5
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
- Severity
- MEDIUM
- cna@sap.com
- CWE-497
- Hype score
- Not currently trending
CVE-2025-0056 Data Exposure Risk in SAP GUI for Java via Local Access https://t.co/j0QDiBGLsV Customizable Vulnerability Alerts: https://t.co/U7998fz7yk
@VulmonFeeds
14 Jan 2025
41 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-0056 SAP GUI for Java saves user input on the client PC to improve usability. An attacker with administrative privileges or access to the victim�s user directory on the Oper… https://t.co/MO2CLeQhHd
@CVEnew
14 Jan 2025
203 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes