Sap Gui For Windows
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_gui_for_windows:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Gui For Windows (b61f00af-b541-5f6c-a741-7563d4cc37ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-43005 |
vulnerable | 2026-06-08 07:25:08.532320 |
Information Disclosure vulnerability in SAP GUI for Windows
MEDIUM (4.3)
SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT application to store user credentials. While this issue does not impact the Integrity or Availability of the application, it may have a Low impact on the Confidentiality of data.
Published: 2025-05-13T00:18:51.756Z
Updated: 2025-05-13T14:00:28.905Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42979 |
vulnerable | 2026-06-08 07:25:08.498579 |
Insecure Key & Secret Management vulnerability in SAP GUI for Windows
MEDIUM (5.6)
The GuiXT application, which is integrated with SAP GUI for Windows, uses obfuscation algorithms instead of secure symmetric ciphers for storing the credentials of an RFC user on the client PC. This leads to a high impact on confidentiality because any attacker who gains access to the user hive of this user�s windows registry could recreate the original password. There is no impact on integrity or availability of the application
Published: 2025-07-08T00:37:55.021Z
Updated: 2025-07-08T18:13:55.456Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42943 |
vulnerable | 2026-06-08 07:25:08.443867 |
Information Disclosure in SAP GUI for Windows
MEDIUM (4.5)
SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths. For a successful attack, the attacker needs developer authorization in a specific Application Server ABAP to make changes in the code, and the victim needs to execute by using SAP GUI for Windows. This could trigger automatic NTLM authentication, potentially exposing hashed credentials to an attacker. As a result, it has a high impact on the confidentiality.
Published: 2025-08-12T02:05:44.263Z
Updated: 2025-08-12T15:57:37.252Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-42888 |
vulnerable | 2026-06-08 07:25:08.379361 |
Information Disclosure vulnerability in SAP GUI for Windows
MEDIUM (5.5)
SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.
Published: 2025-11-11T00:15:00.675Z
Updated: 2025-11-12T20:11:11.635Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24870 |
vulnerable | 2026-06-08 07:12:50.115990 |
Insecure Key & Secret Management vulnerability in SAP GUI for Windows
MEDIUM (6)
SAP GUI for Windows & RFC service credentials are incorrectly stored in the memory of the program allowing an unauthenticated attacker to access information within systems, resulting in privilege escalation. On successful exploitation, this could result in disclosure of highly sensitive information. This has no impact on integrity, and availability.
Published: 2025-02-11T00:37:05.969Z
Updated: 2025-02-18T18:06:30.865Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0055 |
vulnerable | 2026-06-08 07:00:29.201124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39600 |
vulnerable | 2026-06-08 06:41:51.200510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32113 |
vulnerable | 2026-06-08 06:04:44.961145 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41205 |
vulnerable | 2026-06-08 05:48:29.989925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40503 |
vulnerable | 2026-06-08 05:35:18.600694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27612 |
vulnerable | 2026-06-08 05:31:21.912432 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21448 |
vulnerable | 2026-06-08 05:29:12.048273 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.