Main Vulnerability Database Vulnerabilities #VU119388

Information disclosure in SAP Web Dispatcher WEBDISP and Internet Communication Manager (ICM) KRNL64UC - CVE-2025-42878

Published: December 9, 2025

Vulnerability identifier: #VU119388

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-42878

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A remote attacker can trick the victim into performing certain actions within the application and gain access to sensitive information.

Affected software

SAP Web Dispatcher WEBDISP
Internet Communication Manager (ICM) KRNL64UC

How to mitigate CVE-2025-42878

Install updates from vendor's website.

External References

Related Security Bulletins