Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_mdm_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Mdm Server (1cd6f071-14a2-5f1b-96e8-5c93b670c10c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-42996 vulnerable 2026-06-08 07:25:08.522503 Multiple vulnerabilities in SAP MDM Server
MEDIUM (5.6)
SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modify non-sensitive information or consume sufficient resources which could degrade the performance of the server causing low impact on confidentiality, integrity and availibility of the application.
Published: 2025-06-10T00:13:57.561Z
Updated: 2025-06-10T15:15:05.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-42995 vulnerable 2026-06-08 07:25:08.522258 Multiple vulnerabilities in SAP MDM Server
HIGH (7.5)
SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application.
Published: 2025-06-10T00:13:44.987Z
Updated: 2025-06-10T15:15:11.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-42994 vulnerable 2026-06-08 07:25:08.521961 Multiple vulnerabilities in SAP MDM Server
HIGH (7.5)
SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the application.
Published: 2025-06-10T00:13:29.670Z
Updated: 2025-11-12T18:21:55.820Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.