CVE-2025-42878
High · 8.2CVSS
8.2
EPSS
0.4%
Published
Dec 9, 2025
CISA due date
—
The record
SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended for production. If enabled, unauthenticated attackers could exploit them to access diagnostics, send crafted requests, or disrupt services. This vulnerability has a high impact on confidentiality, availability and low impact on integrity and of the application.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-8989 Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the… CWE-1244
- CVE-2025-67862 An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244]… CWE-1244
- CVE-2026-29642 A local attacker who can execute privileged CSR operations (or can induce firmware to do… CWE-1244
- CVE-2025-36755 The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically… CWE-1244