SAP SE SAP Mdm Server vulnerabilities

3 CVEs affecting SAP SE SAP Mdm Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-42996, published 2025-06-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-42994, published 2025-06-10. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit…
CVE-2025-42995, published 2025-06-10. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly…
CVE-2025-42996, published 2025-06-10. Medium severity, CVSS 5.6. EPSS: 0.2% chance of exploitation in the next 30 days. SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modify non-sensitive…