CVE-2025-42955: SAP SE SAP Cloud Connector

Low severity, CVSS 3.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of the service. Confidentiality and integrity of the data are not affected.

Affected products

• SAP SE SAP Cloud Connector

Published 2025-08-12. Last modified 2026-06-17.